45413b0bc00a2a78ab723fb82e6909ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45413b0bc00a2a78ab723fb82e6909ed_JaffaCakes118
Size

369KB
MD5

45413b0bc00a2a78ab723fb82e6909ed
SHA1

ff94218cc9d0762089dd618fd6c98ee46a3cc273
SHA256

dd675791e4e191326bf7042c956c7199cec294bc6d234e8533ed93b17b694f90
SHA512

24af7f47f58bb69b7fbf05839f7d9afef739174de21cdfadc68f7502ebf9c4ce40c56ba6d39caf8179bdbd1382fe9896bd4d0292cf0f9db1b77fa6234d19d07b
SSDEEP

6144:ncxRz12V6IuJwKF/miyh6Ad5UfyKkfczZ0DHsp3XiOWFmuvc79iHGowe7x:cxRz12YZ3/Px65UQ+0DHspvWFz9HL7x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45413b0bc00a2a78ab723fb82e6909ed_JaffaCakes118

Files

45413b0bc00a2a78ab723fb82e6909ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b90b633e21f69b87144e65d10cec63ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

.text
Size: 19KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE