2ffc3f578e5dbbd5d2e944a58717f7e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ffc3f578e5dbbd5d2e944a58717f7e8_JaffaCakes118
Size

308KB
MD5

2ffc3f578e5dbbd5d2e944a58717f7e8
SHA1

764448424a57394377de4dce170dcc430e3be270
SHA256

27f9e04ccaf1cb757ecafdcf258aa52d2b114e9739a5d30c9a2873d8329a90b9
SHA512

81bdb248c03a89b29f6aaaec666e8420229963cfa14899d775f8e0fa916acab9b60d73416eab4c049446037405b20e9e3a09405e5cc99531dd53ede77a5f6378
SSDEEP

6144:7lEF5VMMMMMMMMMMMMMMMMMMbVwMMMMMMMMMMMMMMMMMMfV+VxbrItpLbqaJrKOx:7lEFzMMMMMMMMMMMMMMMMMMbCMMMMMMz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ffc3f578e5dbbd5d2e944a58717f7e8_JaffaCakes118

Files

2ffc3f578e5dbbd5d2e944a58717f7e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc97b014f7bb0536ce61e4700e36988b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shfolder

SHGetFolderPathA

Sections

.text
Size: 46KB - Virtual size: 9.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE