b69c031f9e3bee1fdd37b449b06b504d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b69c031f9e3bee1fdd37b449b06b504d_JaffaCakes118
Size

683KB
MD5

b69c031f9e3bee1fdd37b449b06b504d
SHA1

3c3f4d12b5af5c98d140d097fc14bfe887eb20fa
SHA256

bc3acdfe51ffa0b55070c6f0c25db45b8b334244d6d476848ae44add89e76eda
SHA512

3bf55db238f998907c38acf491b87c267b66216c1d3e7da2ecfebc6f53e7d8b277a7c170e7cbf3e5fbe07f5c549b3caae7c54ec7e07d5da3d041787f3db75fc8
SSDEEP

12288:s+RxrceYURzn1OvbEDs0oDRDaDJL27MpZkOnWVqU:sS19n1AbQxoDRDm674nyt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b69c031f9e3bee1fdd37b449b06b504d_JaffaCakes118

Files

b69c031f9e3bee1fdd37b449b06b504d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ef6c7d1d26a9b5471e1b0af2b2b79bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
CreateErrorInfo

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

.text
Size: 45KB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE