3bef4f843518b4372604ab3e92a8c9c5_JaffaCakes118 | Triage

Sharing

General

Target

3bef4f843518b4372604ab3e92a8c9c5_JaffaCakes118
Size

4.4MB
MD5

3bef4f843518b4372604ab3e92a8c9c5
SHA1

611d6e7d5a544b60469edacb0947f8c5c29214a5
SHA256

d7ff6998096b43768d77652f9c7a7b49b0076aa5467b07c3b9a836729bd15a54
SHA512

466696ab16de710de70647cce4dfccb7bae76fc4d2e727d9bc79c26f57c1155ef56e43d2dada5502ff986d0a82b9c77a9f3a8f1823c72500a59cf958463460bf
SSDEEP

98304:yha7EGJRu56ZZ6tYfwGYXFF1362o4vlUrnSIm7P+IA8yQvK:yUEGJRm6ZZbfYXF7K2o48nSIm72tH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bef4f843518b4372604ab3e92a8c9c5_JaffaCakes118

Files

3bef4f843518b4372604ab3e92a8c9c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9b4cef3f40a98997cf5e2c850f03f67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
Sleep
GetLastError
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
lstrcmpA
lstrlenA
UnmapViewOfFile
VirtualAlloc
VirtualFree
GetModuleHandleA
VirtualProtect
SetLastError
LoadLibraryA
LoadLibraryExA
lstrcatA
lstrcpyA
GetModuleFileNameA
GetProcAddress
HeapFree
FreeLibrary
HeapAlloc
GetProcessHeap
LoadLibraryW
LoadLibraryExW
lstrcatW
ReadFile
SetFilePointer
MapViewOfFileEx
CloseHandle
MapViewOfFile
CreateFileMappingW
ExitProcess
FormatMessageA
SetEnvironmentVariableW
GetFileSize
CreateFileW
WideCharToMultiByte
lstrcpynW

user32

MessageBoxA
wsprintfW

ntdll

LdrLoadDll
LdrGetProcedureAddress

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ