d71764e390aa52517e65f4b1eadd3748_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d71764e390aa52517e65f4b1eadd3748_JaffaCakes118
Size

1.2MB
MD5

d71764e390aa52517e65f4b1eadd3748
SHA1

6eddf5181e124dd8fb98bcb367018f844dab2ca4
SHA256

c0d41b806a2c904388bb3167d49b65b293a63877e106c0e3700b44cda6c001b8
SHA512

d5ff70e9ed97191b3d76f86bdccf250bd9abcfeb944b19fe6ffb926d83e5ec8d0c98df16bafc8d39498293bec6e74f652cba817f2a53c0e3d931da15022d59ac
SSDEEP

24576:5JiWmSTIraMjiZf3PeOWRRuiBVlgNyMgP60F7QCqef7oFWol:5mZa1HVCRXVg1i60F7nz7oFVl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d71764e390aa52517e65f4b1eadd3748_JaffaCakes118

Files

d71764e390aa52517e65f4b1eadd3748_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0410226da0ba805461e8269d81e6fcd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetACP
TlsSetValue
lstrcpyA
Sleep

oleaut32

SysFreeString
SafeArrayPtrOfIndex

advapi32

RegQueryValueExA
RegSetValueExA

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CoTaskMemFree

comctl32

_TrackMouseEvent

urlmon

URLOpenStreamA

shell32

ShellExecuteA

netapi32

Netbios

Sections

.text
Size: 25KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE