86c8433a36c484070c07661ce561ac09_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86c8433a36c484070c07661ce561ac09_JaffaCakes118
Size

28KB
MD5

86c8433a36c484070c07661ce561ac09
SHA1

6cfd83dc223eab1c36b623ed226d919147d8933b
SHA256

48d269d3eccd3c194341a16831c9b8c3474120582cfe86272a5d2e024b8d3bfd
SHA512

5dc0844f356b013f07b5e370b901f72e25d501b90295eba0223c2243edee1f69157fd57d84c4cfef2bbae7f344619a43a0949a461fec89f92d136b9be97e2745
SSDEEP

192:4BW+eVNxM/tDbWeeArbcihsgjshHDAamXf84xJ:4DVDbWeVrwgsgjshHDAamXf84H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86c8433a36c484070c07661ce561ac09_JaffaCakes118

Files

86c8433a36c484070c07661ce561ac09_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0957287b16f4d58ba4d8c06063bbd080

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
Sleep
GetLastError
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
lstrcmpA
lstrlenA
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingW
VirtualFree
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
HeapFree
FreeLibrary
HeapAlloc
GetProcessHeap
LoadLibraryW
MapViewOfFileEx
UnmapViewOfFile
ReadFile
SetFilePointer
ExitProcess
FormatMessageA
SetEnvironmentVariableW
GetFileSize
CreateFileW
WideCharToMultiByte
lstrcpynW

user32

MessageBoxA
wsprintfW

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE