76bcf0f78b2b7e1e370ccae9fe01e605_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76bcf0f78b2b7e1e370ccae9fe01e605_JaffaCakes118
Size

146KB
MD5

76bcf0f78b2b7e1e370ccae9fe01e605
SHA1

45c38fe1a6e170caaf027db76ee32d1ae93fa1bf
SHA256

a04f0a62b817f431dfa2d36d1bc03ded823d9663b86e055ade3f3c00dccc2ee3
SHA512

4e165e4211c05592ad9a5a1cb69c3c3644a21f9a04ced617302ed140434ddb7fa34e7919120bf24327ea49b0d82b224bfbb2b5b9fd07d7e85ede3311e1ae0323
SSDEEP

3072:EkczqPLe7+Ef7Io/U+TclGw7eHC4zw1PW8A+farE7wTco80bxP:EBzqqyEjIo/U5TMMxA+feE7wTcb0VP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76bcf0f78b2b7e1e370ccae9fe01e605_JaffaCakes118

Files

76bcf0f78b2b7e1e370ccae9fe01e605_JaffaCakes118
.exe windows:4 windows x86 arch:x86

edb7c9b813579ba461d5e230b7e7c84a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
wsprintfA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

advapi32

RegCloseKey

msvcrt

__getmainargs

Sections

.text
Size: 19KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE