2ad1d3fa02e79a1ba8d832d2566e5f3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ad1d3fa02e79a1ba8d832d2566e5f3b_JaffaCakes118
Size

2.7MB
MD5

2ad1d3fa02e79a1ba8d832d2566e5f3b
SHA1

6ecc2c8c11d0601b38308395aac25fdd81937b95
SHA256

9517d1a1e05678088eb942893b0fbc7352bc4297a2928b9b10e472ba9772d0d0
SHA512

f6c8c5b1fb08cc7f65fb7f2949ceb3b14fa6b17a7fdc84bc8e66d03d557d310de32a3bef0b72eeb518f6a4c6c123ae2338469614e8b5352f7acd7f8fe505b57d
SSDEEP

49152:NOFISvPD9la2s1tc/tW2B8zXjygtWMTmHg5GcOiJLXQNkAi9hDmC:2z9la2Q2/3B8KXMPbOiJLXQN/i9Nd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ad1d3fa02e79a1ba8d832d2566e5f3b_JaffaCakes118

Files

2ad1d3fa02e79a1ba8d832d2566e5f3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b76f48343ff7b88275c173605b86188

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID
CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA
SHGetSpecialFolderLocation

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

shlwapi

SHAutoComplete

Sections

.text
Size: 31KB - Virtual size: 12.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE