d1aeec589a2f71d7487e8c3a61c94501_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1aeec589a2f71d7487e8c3a61c94501_JaffaCakes118
Size

576KB
MD5

d1aeec589a2f71d7487e8c3a61c94501
SHA1

a39e51c48303e45a80bfd614e563d376ccf0ad1f
SHA256

6f47f813b03e12b37e5bc037df2d68b86248f04d8528900085c7c16a3c58ff37
SHA512

963c96f0667622cb6c4282f27d3ee535d6df9c7cfbc665829d603cee926c38eeccc2fa90e5fb5e92bf56f8f4ff8fc94e69d42fd42e577248e34ce1a6f30f8157
SSDEEP

12288:Xw/3b2o8ecb4lRMYJyxQTAfN8SOSTW/4924Jjp6//MLDenmcj8m3:XQiHe19o3CSOc956/Kcj33

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1aeec589a2f71d7487e8c3a61c94501_JaffaCakes118

Files

d1aeec589a2f71d7487e8c3a61c94501_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58cc66a6292cc24d027152f6c0540433

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

shlwapi

SHAutoComplete

Sections

.text
Size: 30KB - Virtual size: 12.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE