bcaae7d1ad8d3eb6bae00fa5bdd980f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcaae7d1ad8d3eb6bae00fa5bdd980f7_JaffaCakes118
Size

112KB
MD5

bcaae7d1ad8d3eb6bae00fa5bdd980f7
SHA1

20912a957aeb895d4250e410e3ae0aab09443047
SHA256

d0515c78266ac79863f3ae8f8e71dd39094a0d0d2e153fff93021c6740a43c5c
SHA512

6570ac708d77a7672a0b6ad85b38a1af6b1093b6d3172d1ce365b0e1df50fdc6ec93c21e04abb39867aa7b3f5c52ba62dd6046846ba6cdbc939ba7e02517e2db
SSDEEP

3072:VUmvmgxKUquU6c3OsJkkZxDkK6j2DTYHKw8QZiDV:VHKUo3xk8x4KvkHK75DV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcaae7d1ad8d3eb6bae00fa5bdd980f7_JaffaCakes118

Files

bcaae7d1ad8d3eb6bae00fa5bdd980f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9685b235eafa107280ef6bfebadf2237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile

advapi32

RegQueryValueExA

oleaut32

SysFreeString

wininet

InternetReadFile

Sections

.text
Size: 21KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE