2814daba048b954e140553dbc338fef4_JaffaCakes118 | Triage

Sharing

General

Target

2814daba048b954e140553dbc338fef4_JaffaCakes118
Size

1.9MB
MD5

2814daba048b954e140553dbc338fef4
SHA1

ad659233aa6709998651bcf0d349fef5e2650492
SHA256

1dd0dde2fa383346753659139b511c5550d690eea8137c2dc61980e042a6ef37
SHA512

d788e4f5577c84ec1578745f3466755115f2d740099e160f14cf075e21f67273f9c69404311f05cd7ef4fd318499c0812db66ba2b8d69e7322e39c8252a06b3b
SSDEEP

49152:gxdtvIeiumPJgeU56aXx1Rf4USGO2Q6twFW:gPee1mRg95601R4UI6v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2814daba048b954e140553dbc338fef4_JaffaCakes118

Files

2814daba048b954e140553dbc338fef4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1432fae7b9bdbdd7bfc1c1b3ffb4cd78

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetACP
TlsSetValue
lstrcpyA
Sleep

oleaut32

SysFreeString
GetErrorInfo
SafeArrayPtrOfIndex

advapi32

RegQueryValueExA
RegSetValueExA

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

urlmon

URLDownloadToFileA

wininet

InternetGetConnectedState
InternetCrackUrlW

Sections

.text
Size: 25KB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE