1bdf2dc568ff33a8d7396fc079697d33_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bdf2dc568ff33a8d7396fc079697d33_JaffaCakes118
Size

5.3MB
MD5

1bdf2dc568ff33a8d7396fc079697d33
SHA1

41c8c14da67481b76ea47003118cb361b90b766f
SHA256

5c30a54dc93910ee2644608ef20021ea1052c604d687bd59a6c856f4f4568c52
SHA512

f690a409646e3778f03328be993405f359cdd5610d86da982b98e9edb8ce4521a54e36c96abeba37e08fe3043515efab745f915a80535668384d4c04cee5a6a1
SSDEEP

98304:uwLxwku45crdnCLkcrc1jHB1nyNIICMoG/zA8NAQDKQOJogyGZWam2Jx:T2LdCL1rOHB1nKIICM7/THDKQOJolGZ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bdf2dc568ff33a8d7396fc079697d33_JaffaCakes118

Files

1bdf2dc568ff33a8d7396fc079697d33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cbf47572e8cb446c01bd5522c7d7f827

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
GetEnvironmentVariableW
GetVersion

user32

MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 9KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE