05b988cfaab17f3c5d5c18621b6d6e16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05b988cfaab17f3c5d5c18621b6d6e16_JaffaCakes118
Size

9KB
MD5

05b988cfaab17f3c5d5c18621b6d6e16
SHA1

20b67e0df5defe0a5f4a648bdb242125c7af2645
SHA256

0d0d0bc252e3434016b6842ed1003fded71da5601fb22e7b5746128b63b4b6b5
SHA512

e650a8a93e814791975be29efd77bbe0f27b4bb9ed20278292aa34710e70b9b8f1001426daec007d1c4b9a9fe311d9cdcbd83fa833d36b2f0069ed907671e20d
SSDEEP

192:m/z1M0goSScInBjByPXTk+GFnwxYosOPA94:m/zhg2BjmQ+kwxYos79

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05b988cfaab17f3c5d5c18621b6d6e16_JaffaCakes118

Files

05b988cfaab17f3c5d5c18621b6d6e16_JaffaCakes118
.exe windows:4 windows x86 arch:x86

818f1fbcebdb7a5abf3dc7abeb6af66a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
lstrlenW
lstrcpyW
HeapFree
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
GetEnvironmentVariableW
GetVersion
lstrcmpiW
FreeLibrary
LoadLibraryW

user32

wsprintfW
MessageBoxA

Sections

.text
Size: 8KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE