85802a41729bef25776401707a6a15d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85802a41729bef25776401707a6a15d4_JaffaCakes118
Size

1.9MB
MD5

85802a41729bef25776401707a6a15d4
SHA1

d07aecaf3b096e06c14eb39d584f439f71bac358
SHA256

cba6ee5684b1baa9324721eaf6c7071d7d7865b7441845cf66fc2cad006a1f88
SHA512

4bc1dea172a556c32602b6810f7719f5eb81642dbaa2bfedb803cddfa55792f0940d0beb7ce52618b61e300b632ed94d84e72b1ff32b43a306d38feffda3ac66
SSDEEP

49152:a6XgKx/xI318iEvvEP5f92lcB+fyL6/YefRpntKu:PdxpI3OZ8F4lG+nrRbX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85802a41729bef25776401707a6a15d4_JaffaCakes118

Files

85802a41729bef25776401707a6a15d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22b7b782187cab752d493a6da3dd48d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

Sections

.text
Size: 20KB - Virtual size: 13.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE