29e1a43cddf7322b07de4567d4321dea_JaffaCakes118 | Triage

Sharing

General

Target

29e1a43cddf7322b07de4567d4321dea_JaffaCakes118
Size

223KB
MD5

29e1a43cddf7322b07de4567d4321dea
SHA1

be68e5db8229f2d758ccce5ff4ab9907a58a98af
SHA256

66874d10f13e565ab1f8c43584fd88093fe013ea1041d9b8003832af450452c6
SHA512

19fc1c81f5ea793b98e48decfdc52f184d7adf1979dcdf4ddf4e0b3c23e6b4bdc683b9ea6889e38f8a35b1640502e0309f8a8d5e1dfc1a690bf6855ed20fcccd
SSDEEP

6144:8XSkRcJlmnko9pUPfV05tYbP36Vo08s9N8qi7rrZx7UOynbX:JCczmnkZPfV0PSPvEg9x7sbX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29e1a43cddf7322b07de4567d4321dea_JaffaCakes118

Files

29e1a43cddf7322b07de4567d4321dea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c2f9ef89ba7a01211ef334103eb4a74

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetLocalTime

ws2_32

inet_addr

Sections

.text
Size: 19KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE