55a49d6d72811cf9c8922ec00ce32656_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55a49d6d72811cf9c8922ec00ce32656_JaffaCakes118
Size

7KB
MD5

55a49d6d72811cf9c8922ec00ce32656
SHA1

7f540849cc412e3c6550a44c3eb0a84c160911d2
SHA256

7f20f1cfba8f095c880653acd3cadac51f938dc8e2dc07a9cafab293badde3bb
SHA512

c2ce9f51dcadd567c2f635cc29a1e10c4e2c4a5d27a893960e9d07d821e37adae76f914db0aef41d7a04867abe6244e4d2eb16962ee47e3a8d34423b12ed1e9b
SSDEEP

96:+P14EiiTb5MwcoYjbDaheWwhAWYpSgwxY2655qyUvIg9:y14E3T+zjbOwENpPwxYb5Ng

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55a49d6d72811cf9c8922ec00ce32656_JaffaCakes118

Files

55a49d6d72811cf9c8922ec00ce32656_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2bed3b575b122ce7042753fe75b3b7d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GetModuleFileNameW
SetEnvironmentVariableW
SetEnvironmentVariableA
WideCharToMultiByte
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
GetFullPathNameA
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
GetEnvironmentVariableW
CreateFileA
GetEnvironmentVariableA
GetVersion

user32

MessageBoxA

Sections

.text
Size: 7KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE