2429a4f98156f3523c078d002ccefcdb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2429a4f98156f3523c078d002ccefcdb_JaffaCakes118
Size

59KB
MD5

2429a4f98156f3523c078d002ccefcdb
SHA1

53ea8b15d459f02459e7357362a6f6873a93e895
SHA256

949ad8ca8242c6165fe04353922394b983202b2d9071a24340ce684fc372c4e6
SHA512

80381b0c95325a18515f1f3ed5cca8868c1dec1ee4527ac819c761300ba6fbb64f2134ad2b2d43743ac5b9f99967d74125072bc3e240452d9492dedc842ff54e
SSDEEP

768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPQ:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2429a4f98156f3523c078d002ccefcdb_JaffaCakes118

Files

2429a4f98156f3523c078d002ccefcdb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b892955ae494fe908bdf52e81e1dfa4c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

WSAStartup

iphlpapi

GetAdaptersAddresses

Sections

HSUDHUHW
Size: - Virtual size: 148KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

HSUDHUHW
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE