454f10218306247a8c002afe33d9a839_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

454f10218306247a8c002afe33d9a839_JaffaCakes118
Size

986KB
MD5

454f10218306247a8c002afe33d9a839
SHA1

0bcdc4dceee124666f7bdcb986950a2ddd2760ba
SHA256

a6f2bd27276391dd4b77f11fa9327ea607cb3da9c1b01a779628b5ef7c94b54e
SHA512

dd1168ebc3b069ab967b8151ede791241f2abd68f46f27cd646e704b5da5d44028fd7ed5e746f28f99fb0be78a8a0f9591d81aa4a42177cd8357e32b2633aa5a
SSDEEP

24576:PDAJWefMTbO/UCUlG+5HjNwk8ga6/26RmF2Uq3DWi:rx/bFNDm5falWi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
454f10218306247a8c002afe33d9a839_JaffaCakes118

Files

454f10218306247a8c002afe33d9a839_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f1ff4963d244d14a6905aa679dd25b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetModuleHandleA

msvcr70

__p__fmode

advapi32

RegQueryValueA

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE