2e5d2290a39e75506f612689e539f9b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e5d2290a39e75506f612689e539f9b9_JaffaCakes118
Size

39KB
MD5

2e5d2290a39e75506f612689e539f9b9
SHA1

1629d936818e527d8e42a7e6c5d3d5a6559110c0
SHA256

e2a5859d7d1bfd25fb981c43e99dbd44560f8ae87e700684433da399e45374df
SHA512

ae2c2ff1ec9b8e25390a942270d974b7b27656151ab73aeba1d6110421af6494973768515e793767e8ab877937ae75c838e99d26e564a0e59506e9fe5b2936bf
SSDEEP

768:79Zxe6FXXF8jQ0he8Xfx4XQZ6v17T5gFuWImY5QEm0spU8naWTbDcIgijK8:RZRFXXFQHeEGQAv17YImYep0spU8a8bb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e5d2290a39e75506f612689e539f9b9_JaffaCakes118

Files

2e5d2290a39e75506f612689e539f9b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b21349150ed0317b6ae526441512b666

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

oleaut32

SysFreeString

advapi32

RegQueryValueExA

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE