090a8a00a9a89224accf5240bfc5d7c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

090a8a00a9a89224accf5240bfc5d7c3_JaffaCakes118
Size

9KB
MD5

090a8a00a9a89224accf5240bfc5d7c3
SHA1

4f22bdcaf07a1ff9941774aa708d202a1b63dc4b
SHA256

5b09a306042908aef992d6404fa82b45cf969021e95f1677b6bea4da5e593b6b
SHA512

caa66a6d4049625cf97f0f40284a6d6f93ff292a4b76867269af4df300945d07a9bdad8819ebe387b5b57aca5530c16fa7b617e81a851e93b3491aa060ac0d94
SSDEEP

192:N1MU7vP6SpCInxjxg9/HT07VowxYosOPPE4:NB733xjylT0ywxYossE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
090a8a00a9a89224accf5240bfc5d7c3_JaffaCakes118

Files

090a8a00a9a89224accf5240bfc5d7c3_JaffaCakes118
.exe windows:1 windows x86 arch:x86

818f1fbcebdb7a5abf3dc7abeb6af66a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
lstrlenW
lstrcpyW
HeapFree
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
GetEnvironmentVariableW
GetVersion
lstrcmpiW
FreeLibrary
LoadLibraryW

user32

wsprintfW
MessageBoxA

Sections

.text
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE