f60227eaf460ea4b21809d0fe1d53732_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f60227eaf460ea4b21809d0fe1d53732_JaffaCakes118
Size

45KB
MD5

f60227eaf460ea4b21809d0fe1d53732
SHA1

7e513179ea48acefd48278552a2cb604ad7a20e3
SHA256

02034a1601646df3d03558ff54fcf6aed1403b0243546b6e22799539d7ba6857
SHA512

26e9bdfd004846d16d830fbc0714c67c435c4ac30813bab27dc66c9523c6ff40a6a3d5b6167e01bfa4a1d1953f1d8c8a7d4b88e314060f455a578c0b1c5621ec
SSDEEP

768:Azh5xooXTIHXS48HqJ/6N6AhFBlLDgOUfjm5UoOjqTOh0fwf5Bzmh9t1aGoZqJR+:AF5WGTwC4agTAh1XgVjHotih0fwvqfoD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f60227eaf460ea4b21809d0fe1d53732_JaffaCakes118

Files

f60227eaf460ea4b21809d0fe1d53732_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e65b581a17f4daf6e96f007d8bdb7bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile

advapi32

RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

urlmon

URLDownloadToFileA

Sections

.text
Size: 20KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE