dc1060778c80d998f95194460e4be886_JaffaCakes118 | Triage

Sharing

General

Target

dc1060778c80d998f95194460e4be886_JaffaCakes118
Size

7KB
MD5

dc1060778c80d998f95194460e4be886
SHA1

cbc463da5fcd81fae6f4a8da89cc7aebed5085e3
SHA256

476f61bc99cff4a665b9d03257ba8ade22cc1bdab0cb46795b24b6f29732f282
SHA512

39650da4e1df627927e34f419957c77d7b5a9141b05a47bf4f047c019b4ff2a492129ec3e9f4cc89af3a488180dab6995fb492ac953b9a546e283dff9f6b1ec7
SSDEEP

96:kP14EiiTb5MwcoYjbDaheWwhAWXSgwxY2655qyPIvB39:U14E3T+zjbOwEQPwxYb5Ra3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc1060778c80d998f95194460e4be886_JaffaCakes118

Files

dc1060778c80d998f95194460e4be886_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2bed3b575b122ce7042753fe75b3b7d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GetModuleFileNameW
SetEnvironmentVariableW
SetEnvironmentVariableA
WideCharToMultiByte
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
GetFullPathNameA
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
GetEnvironmentVariableW
CreateFileA
GetEnvironmentVariableA
GetVersion

user32

MessageBoxA

Sections

.text
Size: 7KB - Virtual size: 912KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE