f5347db7a066f5ac7a57bd0e9824aa65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5347db7a066f5ac7a57bd0e9824aa65_JaffaCakes118
Size

295KB
MD5

f5347db7a066f5ac7a57bd0e9824aa65
SHA1

7cd881c8d905a4f571ce103f7554ccfbd4ca134a
SHA256

418537cbde1c42e37da71da95bed47cbbf9f648e23f218cdef3a8369b2d81add
SHA512

15d619678e9ca44b5aa695a47d1d49106fe2a8020c09443e4ffff103a0e0d83046f91da956ff4f6b47ffed08372c5ad01537e115b62a86815e688e7069b8a4a8
SSDEEP

1536:Ae9FAOtJzUuJ0x7uKdu0B/HKXFfjbhzaUrOnz/eVzKRbIsUwJoXVi/Vwb3SCqdY:X9FAOtJ/Kdu0B/HKXFfjbhzB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5347db7a066f5ac7a57bd0e9824aa65_JaffaCakes118

Files

f5347db7a066f5ac7a57bd0e9824aa65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b940cadb80c6ab17c0d6c9725b30af77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
HeapFree
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
Sleep
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW

user32

MessageBoxA

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 288KB - Virtual size: 20.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE