3ab10b80420345560447de93e5f8c6b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ab10b80420345560447de93e5f8c6b8_JaffaCakes118
Size

23KB
MD5

3ab10b80420345560447de93e5f8c6b8
SHA1

267de0191b07857f945b9ca0bb1ff67354f16dd1
SHA256

952ae53ce9218cde7333fd699e9cb873a5d7ac2d0fef0f5313138b5da579a67e
SHA512

0077e27a4f7bea37da1b000561523051b0beaac8ce780e5e6cd10802ee6be1b2f88472085d81deb0d631f23b10522884b8d80f1538fb5ed6667eefc106319a72
SSDEEP

384:CARMBOFVrwxYog7eQMeMfYm7aB+rdKhTeK/lmwV:C0MBOrUg7ebHdKle+m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ab10b80420345560447de93e5f8c6b8_JaffaCakes118

Files

3ab10b80420345560447de93e5f8c6b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cbf47572e8cb446c01bd5522c7d7f827

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
GetEnvironmentVariableW
GetVersion

user32

MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 16KB - Virtual size: 1008KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE