2e3cac216dbee7bc6f04a7012bdee8ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e3cac216dbee7bc6f04a7012bdee8ee_JaffaCakes118
Size

84KB
MD5

2e3cac216dbee7bc6f04a7012bdee8ee
SHA1

913d03e18e6bd0c2011f37ffe8813841faa5df41
SHA256

88fbbe06e2e901f7a80afc72db4435a2c15e8960d58cd57d0e29debc1933e0ad
SHA512

9af97a81b41c5b6f030b08e976c274c05c9b83abcd0e24e01888e1423d225152ed86ea9f268342a8e836171cfdc7baf52bb7d5a63a765ebaefdf0a35516f8997
SSDEEP

1536:tNqKr+kEvCdLplOeccMwxD2pYeAOmX0Zx57Lc0XM8/gpqFUgeqLAiDZSt:SKKvGPOJoxD2pYeAOmXIxN72pBgeqDY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e3cac216dbee7bc6f04a7012bdee8ee_JaffaCakes118

Files

2e3cac216dbee7bc6f04a7012bdee8ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17c9b66e15fcd969c70359ef2ffe60eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA
OpenProcessToken

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemFree

comctl32

ImageList_SetIconSize

shell32

ShellExecuteExA
SHGetSpecialFolderPathA

urlmon

URLDownloadToFileA

Sections

.text
Size: 21KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE