b9dc5c6ad3e749b36ab8d9983d5a6b1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9dc5c6ad3e749b36ab8d9983d5a6b1b_JaffaCakes118
Size

352KB
MD5

b9dc5c6ad3e749b36ab8d9983d5a6b1b
SHA1

90dde81d65ab58c6fa38678cf713f92a883d4f20
SHA256

b90258382a34263ff15616a8f6fe5c8aec8c96de4bb86170af78f4e6cc320dc5
SHA512

d8fad6293188f876b4b4351bac694feb4aea3db72cf34571997048aa899adad7cc4074435b4853a966e075e65c71139a568bc603024ad1d9cf8d57e365408259
SSDEEP

6144:PMsvyu6fxB0p39/UXqC3eFV5X2QgSglpkyRlhlXDTYyCrV/Zuu3rj+/NONLOHqVV:EsKu6f4pN8ts3cpUyzvDTYye3P2N6Wq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9dc5c6ad3e749b36ab8d9983d5a6b1b_JaffaCakes118

Files

b9dc5c6ad3e749b36ab8d9983d5a6b1b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48d7e4031e89b149f334e6e01092c5ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

.text
Size: 19KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE