164d243c2d595bdf9b37cf6a30664928_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

164d243c2d595bdf9b37cf6a30664928_JaffaCakes118
Size

1.1MB
MD5

164d243c2d595bdf9b37cf6a30664928
SHA1

7fa544691273a1b1ecdee8dd2fedc25f4b5a03c4
SHA256

9508ff65a6251f2b890323d3f1a442567f0c81d40dcab44ead8a285fba188f67
SHA512

d964775d758229e9997dc38a8700b0b12211f0d6c94b00599498ea62dbb1aea8eb9cef3b173624c67c08b72b5b3838b132ce45fa410de98f990cfb3bc4b2c2be
SSDEEP

24576:P7Snu56GpR+33funFasfqAbLBZ4bYQCxLQp3Jin+pt/D:jSubpE3afqyVibin+ptb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
164d243c2d595bdf9b37cf6a30664928_JaffaCakes118

Files

164d243c2d595bdf9b37cf6a30664928_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f1ff4963d244d14a6905aa679dd25b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetModuleHandleA

msvcr70

__p__fmode

advapi32

RegQueryValueA

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE