aad9603af03936781233b9ccc21aea75_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aad9603af03936781233b9ccc21aea75_JaffaCakes118
Size

4.9MB
MD5

aad9603af03936781233b9ccc21aea75
SHA1

750dd60f9579c3a740aa6389f1e5168adc6d0aa7
SHA256

cf2352972a08679c300dd3ebdff5ff49c28167cd31b0b2b1fc2e5dbc756013a7
SHA512

8c1c0502859893d532cdcf11e9be56c6a592a0154ae071c73e4ece1f5720a6586ed6b3ebea7e22522a1a29462d2d217f7280ede54a5ae5bb53df414696ceda29
SSDEEP

98304:Q09az9Dr5AXbvpu+IPPNSB6eRB3lz2zW8CXFQE17uIIdH6dCP6Ae3jpGZVQoibEK:VQ5fkQPw6en3d2S8uFQ351/cpqVSERqp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aad9603af03936781233b9ccc21aea75_JaffaCakes118

Files

aad9603af03936781233b9ccc21aea75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0a4b194af52112beb5ed8117002833e8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDC

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

advapi32

RegFlushKey

comctl32

ImageList_Add

gdi32

SaveDC

oleaut32

VariantCopy

version

VerQueryValueA

wininet

InternetGetConnectedState

Sections

.text
Size: 24KB - Virtual size: 10.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE