10e6024ce0425c10bc382280631a8d98_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10e6024ce0425c10bc382280631a8d98_JaffaCakes118
Size

2.9MB
MD5

10e6024ce0425c10bc382280631a8d98
SHA1

0ab50bb9d02cf524cad80ee9b3057d538a066ad5
SHA256

cddc05cf14f959011b5a8d0bf7eeb580b0d5a3c44c3cbacb86c7907c08d6eef4
SHA512

aefceace20b73248c44e333b4c823b0bbe70cab7ce6777a64f4c625711837f5481eccbed6e33e2d88d94a56b29f2ba0e0f79a8b74f23f09be2f0305b2492cfc8
SSDEEP

49152:kfcQWHUB+pgsUNmyuzacNVUpkQTbhgrhryd5ZkYLYTmxuBi9nOtkwW1QKB9BvV3J:pZ0+UU1zaRjTVw9ydwY0TRcnO/W1QK/5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10e6024ce0425c10bc382280631a8d98_JaffaCakes118

Files

10e6024ce0425c10bc382280631a8d98_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1432fae7b9bdbdd7bfc1c1b3ffb4cd78

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetACP
TlsSetValue
lstrcpyA
Sleep

oleaut32

SysFreeString
GetErrorInfo
SafeArrayPtrOfIndex

advapi32

RegQueryValueExA
RegSetValueExA

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

urlmon

URLDownloadToFileA

wininet

InternetGetConnectedState
InternetCrackUrlW

Sections

.text
Size: 25KB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE