3051319e1858bc9e6b1cc6d5996a824e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3051319e1858bc9e6b1cc6d5996a824e_JaffaCakes118
Size

162KB
MD5

3051319e1858bc9e6b1cc6d5996a824e
SHA1

3b48748d8ba161f0dfe71ae5ac7f7836c591f99f
SHA256

ae48b5c0051a60528f162872bad9134b6820b7b73decb901c2bea585ad1d6888
SHA512

c47b229735cc768b2cf975f63b862a6e8968dfde3dce65c5558a8284e3abbb6078a825e58ad2d12a498618b90bb5aedd2b5d025ea7ada30a29fbcb8cbe9c265f
SSDEEP

3072:ZKnLPyW1lqU/J1Q8fYriy0OZyr5vUoou5esi9rkYp5y1+zdoZCOIJi1P:EaWPJ/I8feiFOKvj12pp1aY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3051319e1858bc9e6b1cc6d5996a824e_JaffaCakes118

Files

3051319e1858bc9e6b1cc6d5996a824e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cbf47572e8cb446c01bd5522c7d7f827

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
GetEnvironmentVariableW
GetVersion

user32

MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 155KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE