eb34b17f0829e289eb2b462ed030c406_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb34b17f0829e289eb2b462ed030c406_JaffaCakes118
Size

26KB
MD5

eb34b17f0829e289eb2b462ed030c406
SHA1

14dfb42444d7d7277fcdffd2a1b40a8fe055e691
SHA256

0248a6b1a963c6efd2e38d5d155acd8cd98c953393c016baaf5c1c745208f2cd
SHA512

70d9aa4d4550a6b34da223fe0ccc5e7506c7ee1a86f7fd3b19305df1086d5e7769f6c01b71fc00e78fcbee4451f7d32175c8b79ff15af98254f68d26e8f97501
SSDEEP

384:Fbel/hldEtvp8L1o3YtZmiym7X3NwioQBMwQFQy7kQ819Hv:Fil+1GGLqoLw0Qwk7t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb34b17f0829e289eb2b462ed030c406_JaffaCakes118

Files

eb34b17f0829e289eb2b462ed030c406_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b707a8a5c1246de3bb346158a594864

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
VirtualProtect
InitializeCriticalSection
GetModuleHandleA
HeapAlloc
GetProcessHeap
TerminateProcess
VirtualAllocEx
HeapFree
VirtualAlloc
lstrlenA
lstrcpyA
WritePrivateProfileStringA
GetTempPathA
CloseHandle
WriteFile
SetFilePointer
ExitProcess
ReadFile
GetFileSize
CreateFileA
CopyFileA
GetModuleFileNameA
lstrcatA
GetProcAddress
GetLastError
LeaveCriticalSection

user32

MessageBoxA

advapi32

CryptGenRandom
CryptAcquireContextA
CryptReleaseContext

Exports

Exports

szFile

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 931B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ