dcc2558a3ecd3327c64f659f12f15ea0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcc2558a3ecd3327c64f659f12f15ea0_JaffaCakes118
Size

170KB
MD5

dcc2558a3ecd3327c64f659f12f15ea0
SHA1

cde49a4397737373ccc6e1c6e83154ea2a746a43
SHA256

3dc48dc09a881940bb03f58d230dffd65828c40b0c01779e62442e5107cf750f
SHA512

97bfa9d91851d2450b11b382cb0472b25955c51b4bfdb19df25b509360cb3a1fb38b7ca2841d2410ae325e73d5dc0af6f0e0920750086c7ab10ee3754e6349b1
SSDEEP

3072:al6UxmjL2WHHqT8J2n6w+rD9UlnIS+Wfc1TOyJgomClkMLxzpdwbW:al6gm3TKJ6ZviOSIC2ZzlkMLxH9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcc2558a3ecd3327c64f659f12f15ea0_JaffaCakes118

Files

dcc2558a3ecd3327c64f659f12f15ea0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f6ced02617181defbf7e17c76a9427b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

HlinkNavigateString

Sections

.text
Size: 23KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE