0e644000a39c052a0bd9cebefd9defdd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e644000a39c052a0bd9cebefd9defdd_JaffaCakes118
Size

1.0MB
MD5

0e644000a39c052a0bd9cebefd9defdd
SHA1

599c92b723f6bd934f9bd0cad646630fd992d644
SHA256

d9edcc3dd197ee90cdb1ccc89bdeb7d7c752762a1fcc3beeb8ff7c95ba52126a
SHA512

8211c8907fa8689210a0e5f5e09de5991b8f95b5e944b164f787cde6ae1cd0ea5db43bcdcb89ce4effaf57321827ba5371a5d3dbbb195544cc277e5773d3c81f
SSDEEP

24576:JZdpab7IBuwgyDimnS+2GEo2INCGsuofFL9y+2HRYeQ5eH4C:JZdgIBuwHS+2tPTuOFxyFHwe9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e644000a39c052a0bd9cebefd9defdd_JaffaCakes118

Files

0e644000a39c052a0bd9cebefd9defdd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bce3a81923ce15c0afd3b22bbba3a669

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
wsprintfA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LeaveCriticalSection

advapi32

RegOpenKeyExA

ws2_32

getpeername

version

VerQueryValueA

Sections

.text
Size: 24KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE