5e04ac3fc8ee2e5b7d055d6cae5b84f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e04ac3fc8ee2e5b7d055d6cae5b84f1_JaffaCakes118
Size

165KB
MD5

5e04ac3fc8ee2e5b7d055d6cae5b84f1
SHA1

2aa2fc204bd2ba96bff735adce56a57a9bdf4338
SHA256

c14926fbe22bf877a9b1126be35853be9d7c72b81a1ddba4b3e0e637df0fd672
SHA512

471710be90fcc69579322312b44e79e3afda94f8726f9a3c8a3be71b153717a804045295bb0b4d1369cac489d00ac5ea0ce63c0426aee5ff1d965e108ab5804c
SSDEEP

3072:2cMKyCW1l3sZ9PH6PNmrIiSeMS2xu62OMDgWH2/Z6G1ARGpIlb68HPVa6pKQUsGg:FyCGlSHrIiSeyQROB/feBb6SHAQPR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e04ac3fc8ee2e5b7d055d6cae5b84f1_JaffaCakes118

Files

5e04ac3fc8ee2e5b7d055d6cae5b84f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d80fd1cd12513a374defbc1db0176fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

HlinkNavigateString

Sections

.text
Size: 20KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE