39e9240dc33e464fdd07f610e9d8c3df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39e9240dc33e464fdd07f610e9d8c3df_JaffaCakes118
Size

162KB
MD5

39e9240dc33e464fdd07f610e9d8c3df
SHA1

afda7aec98f4c688c7b6a0ab7d049a06c711370f
SHA256

41f4981f9e5b6fc407c985f2637d1ccafd2dc2b2272522a1a1340320991799d9
SHA512

5859d081fc8f8d4e9c43cb19bdbf059bab260c466faec10862bd89661844a8e1afbe3dc65832c9cc727885d7403e225f83a937b0422409d383c9dacd258060df
SSDEEP

3072:zKnLPyW1lqU/J1Q8fYriy0OZyr5vUoou5esi9rkYp5y1+zdoZCOIJi1P:2aWPJ/I8feiFOKvj12pp1aY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39e9240dc33e464fdd07f610e9d8c3df_JaffaCakes118

Files

39e9240dc33e464fdd07f610e9d8c3df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cbf47572e8cb446c01bd5522c7d7f827

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
GetEnvironmentVariableW
GetVersion

user32

MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 155KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE