3a1ab37c35593bd69175d4b00566db18_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a1ab37c35593bd69175d4b00566db18_JaffaCakes118
Size

174KB
MD5

3a1ab37c35593bd69175d4b00566db18
SHA1

372d1fad82a16f4a6464b57fc59b5efaca27c971
SHA256

ddf85ffeb3a224795e1abb750eff0cab077b47ff6238a826f7ac338b75690fbd
SHA512

3aca862eebb80518671dfae5f94885e26304bddf667f00c241025fad241b6a0fe69241b99fb34ea838e551141c89bcf6c839c68165e4da2d600224ac12bc57eb
SSDEEP

3072:V3liQVNxw6Acc4v1Ln7bsYUG0sMOX7KDBx+RDC98eRiGUN7TgpmdUCBziA4GwHt:V3NrAX47cdPsBXADGDa8ecGUN7Tgpmdc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a1ab37c35593bd69175d4b00566db18_JaffaCakes118

Files

3a1ab37c35593bd69175d4b00566db18_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b21349150ed0317b6ae526441512b666

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

oleaut32

SysFreeString

advapi32

RegQueryValueExA

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE