4b3bdd8d7ad0bc3f5edbe9ac8576901c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b3bdd8d7ad0bc3f5edbe9ac8576901c_JaffaCakes118
Size

1.4MB
MD5

4b3bdd8d7ad0bc3f5edbe9ac8576901c
SHA1

bc2513da2a44fec05ebecbc7159e4d2946620deb
SHA256

1d62d164ee0247839f60c85abf4ddab397df97133be863a4ad13be033510dffe
SHA512

bf74b7f2ce65b20c53234e70fff161e3ba302f19d864da631c98d4819a9e0f32744842d2c734f8f73f3bc550507acb6b665fcecf1767d17f0661aabfc156d4f0
SSDEEP

24576:NLfiuZWIEdpDklxTdszNECLK1YJQYvL410HCR6LY7NwONIINhLDWUt/r29qZ7oaR:BfiKQDwRSzNTgYr4iH2SYvNnHWY/H7/R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b3bdd8d7ad0bc3f5edbe9ac8576901c_JaffaCakes118

Files

4b3bdd8d7ad0bc3f5edbe9ac8576901c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d8b126eaa02e43002917801618259aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
CreateFileA

comctl32

InitCommonControls

Sections

.text
Size: 19KB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE