b45d1a17191f116a111f3556396f6add_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b45d1a17191f116a111f3556396f6add_JaffaCakes118
Size

368KB
MD5

b45d1a17191f116a111f3556396f6add
SHA1

00c04c3e0962c983a9588f32af9b5b494a8b60fc
SHA256

37cac69ec1cfa0ae5ceeec54d361e9df3ca1cd9dd191b89603c3ddd82fce16f9
SHA512

113435a3f5042221b8d508dbbfc944a0bf61c3fd98a4a4ae61a54d544d212f65394048305477ae3a196c2abcf6a4a5f677d58815e3226760890b763054d28870
SSDEEP

6144:KP73gzfltTTfvdLsS7og55A7gUKAlXZAAjOOhW3VGJbBxSrmbmU+9m+d9ry:KP7gfzfj+MUFrM/GJVxSrmbmUS93y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b45d1a17191f116a111f3556396f6add_JaffaCakes118

Files

b45d1a17191f116a111f3556396f6add_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b90b633e21f69b87144e65d10cec63ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

.text
Size: 19KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE