82068f7ea5d91d2e453b8fb329cb34ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82068f7ea5d91d2e453b8fb329cb34ee_JaffaCakes118
Size

814KB
MD5

82068f7ea5d91d2e453b8fb329cb34ee
SHA1

e01b228b267e0aa78977a4ebb82cd8c6febe5937
SHA256

5ab492aecd0da688eeda9adcc59056297ddcae1d34debc774a4f7502896c45c6
SHA512

55680106a6c1f2b0b8767ff6bda5578d2f7afd8d9fef54a4fa8e5c87be64bbde43b6005f13753b05332066c84e46a5d651a9a11e4eacee099584a29d6ebe078f
SSDEEP

12288:Kje+LwXPPaAXS8lmUdH6U/BNCmexmRz1igI+FDdEu1pyWeFDOWGDjjqp4:0hAblDJ3/zCmekRoT+PvyWeFDObqp4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82068f7ea5d91d2e453b8fb329cb34ee_JaffaCakes118

Files

82068f7ea5d91d2e453b8fb329cb34ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f1ff4963d244d14a6905aa679dd25b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetModuleHandleA

msvcr70

__p__fmode

advapi32

RegQueryValueA

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE