dde4ddad6a98bc465e3a5d7771635eae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dde4ddad6a98bc465e3a5d7771635eae_JaffaCakes118
Size

366KB
MD5

dde4ddad6a98bc465e3a5d7771635eae
SHA1

d8d247d21ca756d9570ad59fed52586b660d41bc
SHA256

2c988dcb099b797ffcaa1c38236d185637c4d02f920dba57a98aaf1f545e9e05
SHA512

a12e927254e37ce674d3c40d560214727e90e9a8c7ed36ee4cc7f68b3504ca167ab7a618b90adca8450492d8aa6eab50a4d667dd85601458f4b2cac16b674a86
SSDEEP

6144:Rc6RLXofcI3zwp1fS4CEopqqQ6XUJqc3Hjgdw7nciBVyG+Qtn8HyyHc9m:R7ScI3Mp8Yo1XKqc3jvrcinyrQtZyL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dde4ddad6a98bc465e3a5d7771635eae_JaffaCakes118

Files

dde4ddad6a98bc465e3a5d7771635eae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b90b633e21f69b87144e65d10cec63ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

.text
Size: 42KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE