e00e056bb917bcdc3d75e5b6561d80f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e00e056bb917bcdc3d75e5b6561d80f9_JaffaCakes118
Size

263KB
MD5

e00e056bb917bcdc3d75e5b6561d80f9
SHA1

87bf48ab36c99045555abdc09f8fa1d5fc55eb6f
SHA256

cf177d67df1a6f0f4fcab72ecfe0aaa90f42ce674bb01c1c630759d62e3b20ff
SHA512

6395f92927eb96854a6e8361b0e0d8dc5ef2e4c0775bc95a13138d90d8836d8aaaa1dcdcc14a8254433719f9437ba1dd8007810a3efe2b8979d32d5bd0c11967
SSDEEP

6144:p80Dcs10TMbsZkEoLMU4+/RNB+e1u6UJQNPRFIVj3LLld3II:p/gseIo1oLMU4+/Ue1I6G3LRd4I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e00e056bb917bcdc3d75e5b6561d80f9_JaffaCakes118

Files

e00e056bb917bcdc3d75e5b6561d80f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

106cbb7abffe9ca0a62e1d2702f4af93

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
SendMessageA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

Sections

.text
Size: 23KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE