ab339c7cb9467a386ab7349aa1dd709f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab339c7cb9467a386ab7349aa1dd709f_JaffaCakes118
Size

1.3MB
MD5

ab339c7cb9467a386ab7349aa1dd709f
SHA1

8f182ced144bc634e0fc28f720e4f3a7cd7b823f
SHA256

2cf250eb2b632b18487f1dc8babff6af72710a78ecdf8e0c185bf271d9837fc4
SHA512

b1560bee305d08348f5be154d16aaa244ab29c7abd45d9ed2ac77ce945479744b0c09b70cfb732af7c9a1b267efc430d0f62a878810f89abb3227d5fa6ee5107
SSDEEP

24576:1/uWndvMFgiHhzeLMX4mk8yBfJ5C0t0uWndp5cJoQEmlucsiT4BT6Fow:JtMFgswoX4uyBfDCHRjQEmlucPT4BUH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab339c7cb9467a386ab7349aa1dd709f_JaffaCakes118

Files

ab339c7cb9467a386ab7349aa1dd709f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63c4868cde67717ef9176c41492fc573

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrlenA
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

OleUninitialize

comctl32

ImageList_SetIconSize

shell32

ShellExecuteExA
SHGetSpecialFolderLocation

Sections

.text
Size: 26KB - Virtual size: 788KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE