a16aa547fe3ba5bf1b339fd0e2353aaa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a16aa547fe3ba5bf1b339fd0e2353aaa_JaffaCakes118
Size

242KB
MD5

a16aa547fe3ba5bf1b339fd0e2353aaa
SHA1

3464066d4f31b1dfea15273493586203cb325a45
SHA256

082c2a7a74ed540b02fec6185d7611fe1566d9a2a3391b3296d38ca94380bae2
SHA512

966b2cb5ab9880827d1b6959c2825a73418821817992123b462ebb997f87f7e3228d780cca912d51287b046da779a005cd24dc4d3b2e1bd0730824ee8d75b5dd
SSDEEP

6144:gudDumXOeEXiWaAxbPtwm2zhwLkQ2NVzHS2EZQXhIOi:BrX/aicwbzhm2nynoFi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a16aa547fe3ba5bf1b339fd0e2353aaa_JaffaCakes118

Files

a16aa547fe3ba5bf1b339fd0e2353aaa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84d77e3e22be3932bc6787d98cafd260

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDC

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

advapi32

RegCloseKey

comctl32

ImageList_Add

gdi32

SaveDC

oleaut32

VariantCopy

version

VerQueryValueA

Sections

.text
Size: 19KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE