a949767a854ba82f49924a7eed6c4639_JaffaCakes118 | Triage

Sharing

General

Target

a949767a854ba82f49924a7eed6c4639_JaffaCakes118
Size

7KB
MD5

a949767a854ba82f49924a7eed6c4639
SHA1

d54fdcefca7e6a4aaa895ea3ae5e39e459fdd9de
SHA256

2f40b65a56a03e0e73f670b5b24a81870e70f6fc8fed82b1c97f6f97696e1ed6
SHA512

e67b5c9c172521797608da6324d2844c0c17881674063ab5e277818cf543fb15959511dcb31319657b905a1c69d907a67e6b28be462d8df10f6b6fee03ddd0fc
SSDEEP

96:a4X1c6fXkkZSBBUSilnzmnVGDiWlokrwxY26uU0avPDe:aA1ckk3BTilzUPzkrwxYooDe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a949767a854ba82f49924a7eed6c4639_JaffaCakes118

Files

a949767a854ba82f49924a7eed6c4639_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cbf47572e8cb446c01bd5522c7d7f827

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
GetEnvironmentVariableW
GetVersion

user32

MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE