13cad2a34fd5a83bf16af69a40f0e97b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13cad2a34fd5a83bf16af69a40f0e97b_JaffaCakes118
Size

7KB
MD5

13cad2a34fd5a83bf16af69a40f0e97b
SHA1

f70ca78df747502910f15626a41dc463bc5514e8
SHA256

762804385d927c2953205f785bfcf3844bccd19c8ebb352b1f55f5803743af43
SHA512

bde06d22d97f809b5d312b30790e06be82bd0b38cb0c8c700274d316ee568c8185082448bb87991732c57ba55420cf127f447ed45754d533de8c6b17fbd3e8bf
SSDEEP

96:yP14EiiTb5MwcoYjbDaheWwhAWXSgwxY2655qyUvrN9:W14E3T+zjbOwEcPwxYb5qN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13cad2a34fd5a83bf16af69a40f0e97b_JaffaCakes118

Files

13cad2a34fd5a83bf16af69a40f0e97b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2bed3b575b122ce7042753fe75b3b7d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GetModuleFileNameW
SetEnvironmentVariableW
SetEnvironmentVariableA
WideCharToMultiByte
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
GetFullPathNameA
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
GetEnvironmentVariableW
CreateFileA
GetEnvironmentVariableA
GetVersion

user32

MessageBoxA

Sections

.text
Size: 7KB - Virtual size: 6.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE