54a5ed3fe6bc1d247d7b9af17540fe9d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54a5ed3fe6bc1d247d7b9af17540fe9d_JaffaCakes118
Size

318KB
MD5

54a5ed3fe6bc1d247d7b9af17540fe9d
SHA1

d7f168ed893970bc0cbbb36b4b7eb1b9e65d792a
SHA256

0ece34e5bbd353c438195687533173ff58c1635502d9376ac1923c942ff1d219
SHA512

7f426f4284eede4a373add1d41c3bf7a9ac3210134b0200a3dd590fff4df04c2b2059b27a9aaed63ea50cd08a97451335b1d741f7491b8e9925d86a7932926cc
SSDEEP

6144:LtGtNVlL6SzBVL53cYQ3UtAQMxjC1caT6wcdydHPy0RsyY:WNTLrzBVL5Sk2nC1c1vdsJRu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54a5ed3fe6bc1d247d7b9af17540fe9d_JaffaCakes118

Files

54a5ed3fe6bc1d247d7b9af17540fe9d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b20f0bd037776d02d8a20d43233f4af6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDC

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

advapi32

RegCloseKey

comctl32

ImageList_Add

gdi32

SaveDC

oleaut32

VariantCopy

urlmon

URLDownloadToFileA

version

VerQueryValueA

Sections

.text
Size: 19KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE