bc27ceb500b751b545c02f8931756574_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc27ceb500b751b545c02f8931756574_JaffaCakes118
Size

23KB
MD5

bc27ceb500b751b545c02f8931756574
SHA1

5cfffb6b5b4db2a4cb26da4a78d0c133c03086af
SHA256

3bd12e1d2a1c129fce294942f12190d2bea1381af70e625c8aba9d232214a91e
SHA512

df6cb4b01257d1d208f1d874c2e501789539a0d0e08f9f63092a35634eb720fa5050aec86c67105a47948b632cc5a0d330a07474f21db002162db5b8f3d7418d
SSDEEP

384:5LkqYE50tbOSruCmRiRnmIQFVphS/fX5qXdLJ94t2BsxawxYM5rUatEKDx:uq5tSruCapfVpQHXkNLP4tMg5gg1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc27ceb500b751b545c02f8931756574_JaffaCakes118

Files

bc27ceb500b751b545c02f8931756574_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f6ced02617181defbf7e17c76a9427b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

HlinkNavigateString

Sections

.text
Size: 23KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE