df8c89c9f50a2a10d69bb0ef72d7310a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df8c89c9f50a2a10d69bb0ef72d7310a_JaffaCakes118
Size

86KB
MD5

df8c89c9f50a2a10d69bb0ef72d7310a
SHA1

1c0f43a74cd82652a678939d94b90a0600f2ff91
SHA256

31bd06bd3c153a755d8299d95368b236e204cba551f8c628a53b189eabd1b1d9
SHA512

d969904eebf703fa80c81437028e5a38c2a68c993243ce5cd8b541df63e60de9cced777c24ce6956905eb82b1728f5fda06559bfb53d2b30e99822c9f90496a9
SSDEEP

1536:vATJaJ/Pm3DQN9MwabFJ9XT8xV1cZPpSOpsYlIg5DwwCd9odvoYzf3:vATo/H9MtR/k1cZVSoww29o7f3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df8c89c9f50a2a10d69bb0ef72d7310a_JaffaCakes118

Files

df8c89c9f50a2a10d69bb0ef72d7310a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e7f50c44526055d61ce6b1693a37cad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

urlmon

HlinkNavigateString

Sections

.text
Size: 29KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE