2c29e82755dc5e1036de34f1c318786e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c29e82755dc5e1036de34f1c318786e_JaffaCakes118
Size

28KB
MD5

2c29e82755dc5e1036de34f1c318786e
SHA1

58cb6201f08428c19afb4dc6a2558afe03346146
SHA256

94ed2860ee9fbd65c36a8a6638d5a8aa6f5887d88835c00a8bcccf995c65d8d4
SHA512

0ad2629d8d286f4a3ad32a5d1c3d66f43c87592ae546f2e56732cb65f2df19c424718c617461697f1dfcf7b9d1b6c2b22dbb645995d37699ac2bafbc546806ff
SSDEEP

192:qj/SHiv8S/NWITnL2tA9yNzJ0ANdOdSRST5nP1o:q98wWOyO0/OdSRST5P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c29e82755dc5e1036de34f1c318786e_JaffaCakes118

Files

2c29e82755dc5e1036de34f1c318786e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46084168b412e051097ae39c055c9320

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
Sleep
GetLastError
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
lstrcmpA
lstrlenA
UnmapViewOfFile
VirtualAlloc
VirtualFree
GetModuleHandleA
VirtualProtect
SetLastError
LoadLibraryA
LoadLibraryExA
lstrcatA
lstrcpyA
GetModuleFileNameA
GetProcAddress
HeapFree
FreeLibrary
HeapAlloc
GetProcessHeap
LoadLibraryW
LoadLibraryExW
lstrcatW
ReadFile
SetFilePointer
MapViewOfFileEx
CloseHandle
MapViewOfFile
CreateFileMappingW
ExitProcess
FormatMessageA
SetEnvironmentVariableW
GetFileSize
CreateFileW
WideCharToMultiByte
lstrcpynW

user32

MessageBoxA
wsprintfW

Sections

.text
Size: 24KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE