5eba6b211d0e387db72f50560bc1503b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5eba6b211d0e387db72f50560bc1503b_JaffaCakes118
Size

52KB
MD5

5eba6b211d0e387db72f50560bc1503b
SHA1

7b3c26b09d99e291fa12358446426002ef346b98
SHA256

15d2eb7fe85e8772746707d231bad3aa22f8dfe90cbe36c63ed3701cbcec8b88
SHA512

7f3d4999d10c31ee281913468dbf19c35493af30652c507bac81d9332bac2ca7d106307c0cb0718dddfa69a623075957fe7781cc66efc15b5162068d99d4c865
SSDEEP

768:smoD5mLenxQpTtNTofvGOt5AwaS/iKH2Srbb2dSWH8ti/7h:suLexQpTOpQUiZSflWHQi/7h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5eba6b211d0e387db72f50560bc1503b_JaffaCakes118

Files

5eba6b211d0e387db72f50560bc1503b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b940cadb80c6ab17c0d6c9725b30af77

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
HeapFree
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
Sleep
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW

user32

MessageBoxA

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 44KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE