65935e2d40fc71ed21fecd12b9b29287_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65935e2d40fc71ed21fecd12b9b29287_JaffaCakes118
Size

9KB
MD5

65935e2d40fc71ed21fecd12b9b29287
SHA1

cdddc7296cccc01a1090ad9e29fe506b76f0f302
SHA256

69564ab33eb4ca19c7d0fe6135cb00065e4f12441e9c35f908b79ad469d07a5e
SHA512

e04d04e4bc11d0e0c885191b7899ac056d02000cb42bc7b278653acb94c518e5d54be7087af2b5e592c832bd27eb97e6434822e0ed569babbbad3dcadfe56cec
SSDEEP

192:dA1ckk3BTilzUPzkrwxYooDelpBMNmFWEbV:dARMBOFJrwxYooDelfdFWYV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65935e2d40fc71ed21fecd12b9b29287_JaffaCakes118

Files

65935e2d40fc71ed21fecd12b9b29287_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cbf47572e8cb446c01bd5522c7d7f827

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
GetEnvironmentVariableW
GetVersion

user32

MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE