f05beeb86027d1c6384cc1ac34f71077_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f05beeb86027d1c6384cc1ac34f71077_JaffaCakes118
Size

152KB
MD5

f05beeb86027d1c6384cc1ac34f71077
SHA1

b47b6457bce23fd55a83f3c8a30f127373e67ae1
SHA256

37e98f68e6cfacc535f44494c7c3459e405930f8bf68ff3e1ffdf8230c7f4c55
SHA512

6ef06a7c1265c4d88334c342e1a0e9cdad1cad092f026fd280cbea6f6538f35172b7be93a0be18359c2c1a57adb5058d5a199243d8eba7efb5a76470fbf6dc3f
SSDEEP

3072:kdetHXfywWNzBfnv75XIYwESYXcQYDEWJNVL:vnGfnv9XIYqcY5N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f05beeb86027d1c6384cc1ac34f71077_JaffaCakes118

Files

f05beeb86027d1c6384cc1ac34f71077_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b940cadb80c6ab17c0d6c9725b30af77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
HeapFree
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
Sleep
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW

user32

MessageBoxA

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 145KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE