2b096df09c3fd0e7dd13d9985ce23da2_JaffaCakes118 | Triage

Sharing

General

Target

2b096df09c3fd0e7dd13d9985ce23da2_JaffaCakes118
Size

23KB
MD5

2b096df09c3fd0e7dd13d9985ce23da2
SHA1

3449511593f2900411e3810a693982534a4fce45
SHA256

6fd21009ab60e04a4caaf2bcf1aecafe5b86f183867a03cc3487e001cb6e3779
SHA512

a35a19e343ebf43af0f7cb285a155c7544053cf724cec3e91c921c0517ee543e626fd08e26b8b72f2ddc27a4ec393a3e673d42100ea5d244172935b307251454
SSDEEP

384:W1ZTBRXWkzXkH8hdT+1XR+myRg/iev2VA3sMdqj/XITyoqdgjawxYM5OKOFz5wWs:WnTbX2D6m+gKev2VUswWXCymr5EFuWs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b096df09c3fd0e7dd13d9985ce23da2_JaffaCakes118

Files

2b096df09c3fd0e7dd13d9985ce23da2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a44d45584dcf9ac6a7643097738df895

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

Sections

.text
Size: 23KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE