ce4e88a00297ea224dd67ed971f25629_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce4e88a00297ea224dd67ed971f25629_JaffaCakes118
Size

828KB
MD5

ce4e88a00297ea224dd67ed971f25629
SHA1

c98115f8eecd67dd8572d396f22a620caf718009
SHA256

f18bca0c51a746b83551b8876fa53a713b305056aa2c39623e11883e4a29a54e
SHA512

2b98a70f42f154e77018647f306946e8cd1c65490760206e04c9d300dd1b7056e462b390176f3f7a0c4678c7669016227a0bf3a9f2041749ef17cbbec0a58688
SSDEEP

12288:0mlcOsb+DkgB0JHl5kZVnGCtRDWsXE7Ep13U2MgAuKdTmmA/EvoxAddbOVtV8Wxw:zcMDkfHl584DWMlgAuwACHkLwDSTPwt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce4e88a00297ea224dd67ed971f25629_JaffaCakes118

Files

ce4e88a00297ea224dd67ed971f25629_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c5efb59ee459159f9dc50b147ca4f96

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
MessageBoxA
MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetModuleFileNameA
GetModuleFileNameA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA
OpenServiceA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

cfgmgr32

CM_Get_DevNode_Status

Sections

.text
Size: 108KB - Virtual size: 568KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE