ba423adba308d2b1fd316bc872498d68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba423adba308d2b1fd316bc872498d68_JaffaCakes118
Size

28KB
MD5

ba423adba308d2b1fd316bc872498d68
SHA1

edb799cab43e62cb05dcea9bb0fada04c6313f80
SHA256

5a38d0bcfd32a65292d14ff9403b9c22a4d825d9c7e475481ebded1f05cbbecd
SHA512

9d9632e3307b3b0fbd1d54420bfcd4ed996bf090846e833c0009554fce9c80c8a1d40a701b5244d7171df9ba8af193467471e7ed2d9b4d9c52e89b51c2c0dff0
SSDEEP

192:Dj0SLiv8S/NWIDnfCQtNdyNzJxRSQRHDISRST5nzW9:Dm8wW+trcSQRHDISRST5z+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba423adba308d2b1fd316bc872498d68_JaffaCakes118

Files

ba423adba308d2b1fd316bc872498d68_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46084168b412e051097ae39c055c9320

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
Sleep
GetLastError
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
lstrcmpA
lstrlenA
UnmapViewOfFile
VirtualAlloc
VirtualFree
GetModuleHandleA
VirtualProtect
SetLastError
LoadLibraryA
LoadLibraryExA
lstrcatA
lstrcpyA
GetModuleFileNameA
GetProcAddress
HeapFree
FreeLibrary
HeapAlloc
GetProcessHeap
LoadLibraryW
LoadLibraryExW
lstrcatW
ReadFile
SetFilePointer
MapViewOfFileEx
CloseHandle
MapViewOfFile
CreateFileMappingW
ExitProcess
FormatMessageA
SetEnvironmentVariableW
GetFileSize
CreateFileW
WideCharToMultiByte
lstrcpynW

user32

MessageBoxA
wsprintfW

Sections

.text
Size: 24KB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE