3b9f25131429e9158a6409c9937aec4b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b9f25131429e9158a6409c9937aec4b_JaffaCakes118
Size

824KB
MD5

3b9f25131429e9158a6409c9937aec4b
SHA1

56467fa7c0b278a4d7ab729ebe64d3324dd5a792
SHA256

ef00cd2569c77fdee55e0c11b4452239007729a44004aae51ef34d3427648f83
SHA512

b57d3f9def432b0e5b1c478f737929fd8f089e66ec1ed445dbd69e76ed8a478b92f844aec19d83557d8524decd0bfe911c7af8e29deb36e25e6923a44c7627ec
SSDEEP

12288:+OjMM4+o0cLl7LBEP3+vDgN99vwgbhapKIMG/J7BstuKoJmquT6FF1DLGRW4EeRq:aqo0WHBE2wnHNY0chPn9m9++r3e2mT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b9f25131429e9158a6409c9937aec4b_JaffaCakes118

Files

3b9f25131429e9158a6409c9937aec4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43649eaf61ced708400960ed122f8050

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
MessageBoxW

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetModuleHandleA

msvcrt

__getmainargs

Sections

.text
Size: 44KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE