0b08fe60c9649cf81a58434cde49e4ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b08fe60c9649cf81a58434cde49e4ce_JaffaCakes118
Size

169KB
MD5

0b08fe60c9649cf81a58434cde49e4ce
SHA1

6208b473d3894fac64d25f1fd4cd8251762d88db
SHA256

d7fc3c2029eb6ee0ae0410b50b0f171bf313f7f757c23d00e768b2574eebd392
SHA512

a55bc313a7d2b72b93670d049a817034e7e91de2ef5bd83d24ae23d19516845862bdc40f96e0951c5f66d937e476a29519338e868f013affdedcfe3aef393047
SSDEEP

3072:BuAyf2fYOZhHKPx0eKsu4rsYFLQ0GKwdwpV8HDbqMxRVLQydtVEAKgicqpZRJjyj:C4LZhcxW4lDYdW8qMxRxQydthKgwNGcA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b08fe60c9649cf81a58434cde49e4ce_JaffaCakes118

Files

0b08fe60c9649cf81a58434cde49e4ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f6ced02617181defbf7e17c76a9427b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

HlinkNavigateString

Sections

.text
Size: 22KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE