2edd58d617fbf9d5a3358c50c34983ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2edd58d617fbf9d5a3358c50c34983ab_JaffaCakes118
Size

327KB
MD5

2edd58d617fbf9d5a3358c50c34983ab
SHA1

96b49e50f1081e60aea8b8f5bc88375f09d218e7
SHA256

e0389940b6210a0172ba3eff589638e9fcf9b366423d62377db3fc1f5d9badb9
SHA512

eaa71a7442efd0f95009e7375055bb6db1ab5c1148cf4f3c1cd43047ebb245b59243587e7ecd27789b8fb5633087b7ad7c4b4845c679a671948dca6c0470440f
SSDEEP

6144:MN662t8KcoB3cknV7pqDEHb2jpHKgKxpPo1uKNXdhmYh7zLWEMy:/62AwHTqDw2FHKhxpPvedhlFFj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2edd58d617fbf9d5a3358c50c34983ab_JaffaCakes118

Files

2edd58d617fbf9d5a3358c50c34983ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8aa7aed834b341322fc21cb01467097e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
PeekMessageA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetACP
TlsSetValue
WriteFile
Sleep

oleaut32

SysFreeString
SafeArrayPtrOfIndex

advapi32

RegQueryValueExA

Sections

.text
Size: 25KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE