da2f4abb59fba3d289555a9798f4055d_JaffaCakes118 | Triage

Sharing

General

Target

da2f4abb59fba3d289555a9798f4055d_JaffaCakes118
Size

23KB
MD5

da2f4abb59fba3d289555a9798f4055d
SHA1

4c11b6bc7b4cf9d331e08eedf048430906b68dc1
SHA256

963956b150bcb20fafad7da0eea03cab724c02a55d86e38e5231579aecd5b084
SHA512

e308e1b50622e7b30b9a333454d96b128aede7d46f4752bf8cfa56fc024b7315b5d8bfd19d67ddd17ef8096da4eae3644c9833a96bd08679b2f7ef0f424a0020
SSDEEP

384:LpliZr3AOQ9Rxfgyyk/LSw9Xk2VH50UAAhH29V6SpO7w6HdqcRawxYM5X3HG:LplRqytLx1kWHGDF9I7w6HdqU5X3HG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da2f4abb59fba3d289555a9798f4055d_JaffaCakes118

Files

da2f4abb59fba3d289555a9798f4055d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

787c95924b30f119bf87d3b3e3f8f9db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE