62db797c90f6909b71ba1ce471bf44ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62db797c90f6909b71ba1ce471bf44ba_JaffaCakes118
Size

38KB
MD5

62db797c90f6909b71ba1ce471bf44ba
SHA1

46d0c9b082546d5035bbea36ec1bf51a1bea0176
SHA256

5947eda6794af2bebeb96521df933c0ead459ea4e22a8b07516e8b38e435c583
SHA512

64e87d5db0b40d93e6eadf874d347ae41ff4d9e95435c3b1de6ef4cca6e5522494cdd5830961ecef3ae3dd3993c575c1e1060b25836c413c2b290fa4ae4ff00c
SSDEEP

192:oAj/SHiv8S/NWITnL2tA9yNzJ0ANdOdSRST5nP1ouUdvc1lymha1a2Sc:P98wWOyO0/OdSRST5PnWelymhga2Sc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62db797c90f6909b71ba1ce471bf44ba_JaffaCakes118

Files

62db797c90f6909b71ba1ce471bf44ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46084168b412e051097ae39c055c9320

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
Sleep
GetLastError
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
lstrcmpA
lstrlenA
UnmapViewOfFile
VirtualAlloc
VirtualFree
GetModuleHandleA
VirtualProtect
SetLastError
LoadLibraryA
LoadLibraryExA
lstrcatA
lstrcpyA
GetModuleFileNameA
GetProcAddress
HeapFree
FreeLibrary
HeapAlloc
GetProcessHeap
LoadLibraryW
LoadLibraryExW
lstrcatW
ReadFile
SetFilePointer
MapViewOfFileEx
CloseHandle
MapViewOfFile
CreateFileMappingW
ExitProcess
FormatMessageA
SetEnvironmentVariableW
GetFileSize
CreateFileW
WideCharToMultiByte
lstrcpynW

user32

MessageBoxA
wsprintfW

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 8KB - Virtual size: 720KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ