b1c2f9466fb04d3ded8044039cfb9687_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1c2f9466fb04d3ded8044039cfb9687_JaffaCakes118
Size

308KB
MD5

b1c2f9466fb04d3ded8044039cfb9687
SHA1

9dd6e0957f8b71acb108b4aa932dec776ce1bc20
SHA256

7da7440a52a6ea31d3262038e93d556851e327e5197422e20f07a8d30f7ece14
SHA512

49f195db7b8b3f3a04021f86701ca9c963a3ded8cbbcd06c71824ec0e91765c13094424624d1ec7b8897950cfc7cae9efbe4368f20c078579087e29ba331e8bf
SSDEEP

6144:HZ6SNiR0wub5ZKE60pq6gGwgsG4EjuSPmk11oOAE7yf5QBaev:56SaXulZK0rgGwgspcPma4EkuwE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1c2f9466fb04d3ded8044039cfb9687_JaffaCakes118

Files

b1c2f9466fb04d3ded8044039cfb9687_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48d7e4031e89b149f334e6e01092c5ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

.text
Size: 19KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE