d1406670b194a49d6e6038185021116b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1406670b194a49d6e6038185021116b_JaffaCakes118
Size

188KB
MD5

d1406670b194a49d6e6038185021116b
SHA1

26b99860dbc4776cacae402ff19020bf5a9567c6
SHA256

9365488748c7d2b9cf4318c7b9d8847057492020dca17f6e4e726db6d48faf85
SHA512

9236be64e3dc64e082bad0013d91598ae75bea5585686dceba0d0d2aef1e63349acc1f649b051d8b732238b112c3886924ab1891ee3b12d3f0d6f35cf9f3f7f0
SSDEEP

3072:hwyxDmXgvRi5Guq8/IjmLvfk5txTVK+9fEx8CTQOppsHlcDtBrqjA0AiqhSEM6:20aXcRi5BICw5txJK+9sLSHOJp0AiiM6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1406670b194a49d6e6038185021116b_JaffaCakes118

Files

d1406670b194a49d6e6038185021116b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1704b3da33714fe13129d218f43cadde

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
CharNextA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

advapi32

RegCloseKey

oleaut32

VariantCopy

wininet

InternetOpenA

Sections

.text
Size: 19KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE