b823c5ef0e2e408af53f2818525c75e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b823c5ef0e2e408af53f2818525c75e3_JaffaCakes118
Size

3.0MB
MD5

b823c5ef0e2e408af53f2818525c75e3
SHA1

06c7d8a070a78a25601aa7b899ec4a580a76d4d9
SHA256

525cde9edee66ad9058d351333830a4e294f139f4447cd045cb58fd525ac307d
SHA512

3e100eb3350059210a5aa40796e18e49393df7f1a2665b60e5065229a2b27f047a3c1f04191c7e26c4df5bff4b58795ad8c6343f0c400c99b008e701034e0954
SSDEEP

49152:dlq8CzEKP9PiAFukwcWe8St9m6XuGyP46G1rt6uR5UiuVb2L9UMsrB:dlq8axFukHWVeJXZJtTR5kII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b823c5ef0e2e408af53f2818525c75e3_JaffaCakes118

Files

b823c5ef0e2e408af53f2818525c75e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48e9bec0a04071eb65dab37387ac335d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles
ExitWindowsEx

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

.text
Size: 23KB - Virtual size: 23.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE