a8371e20da0b6b4398cd61b64dbf5777_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8371e20da0b6b4398cd61b64dbf5777_JaffaCakes118
Size

162KB
MD5

a8371e20da0b6b4398cd61b64dbf5777
SHA1

dd060bfb81524e690c29aa1a1caa848f582a06d2
SHA256

223b508c35d4c69cbb32be59b88c2538e272234215dc4da4099710499cba9fa8
SHA512

4c671c02931d2faf03e534bf354ff53bf05b38a579578902d178c5e9c216de7a145b088eb1fcd751b76195bb7f447524736750cce605aeaf079462db90ba489a
SSDEEP

3072:qKnLPyW1lqU/J1Q8fYriy0OZyr5vUoou5esi9rkYp5y1+zdoZCOIJi1P:VaWPJ/I8feiFOKvj12pp1aY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8371e20da0b6b4398cd61b64dbf5777_JaffaCakes118

Files

a8371e20da0b6b4398cd61b64dbf5777_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cbf47572e8cb446c01bd5522c7d7f827

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
GetEnvironmentVariableW
GetVersion

user32

MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 155KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE