b9475727563722afcb2bac569dcf039b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9475727563722afcb2bac569dcf039b_JaffaCakes118
Size

110KB
MD5

b9475727563722afcb2bac569dcf039b
SHA1

4a7ca87a52d40a9a8df3fdb073ab8d37267a6b91
SHA256

dd6a844de71de41f4211f66ac32481af649ed5993e12dc4cd5b21f5732351d9c
SHA512

0131072f47482a0a90b6a8badc91bf7b529050ccf22838a505dcfcefe709866c5749152f8159c1c2249f5c9c1a7fba2333506c06cc98e727b5f7af8b60f53315
SSDEEP

3072:wjU2tIcM02Wxr1E8RreZkngSGgWEx93L5uPjYVt:lQU846WEx9b8PjYV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9475727563722afcb2bac569dcf039b_JaffaCakes118

Files

b9475727563722afcb2bac569dcf039b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d459d9653a732b130c918436f6a7e000

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
ReadFile
WriteFile
CloseHandle
CreateFileA
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
GetFileSize
UnmapViewOfFile
Sleep
lstrcatA
lstrcpyA
LocalFree
LocalAlloc
DeleteFileA
lstrlenA
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
IsBadReadPtr
SetFileTime
GetFileTime
GetCurrentThreadId
GetCurrentProcessId
ExitProcess

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ