8c9b09eba8039ae2286db960ddbe8fa8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c9b09eba8039ae2286db960ddbe8fa8_JaffaCakes118
Size

13.7MB
MD5

8c9b09eba8039ae2286db960ddbe8fa8
SHA1

4c16c5790861dfc6d1922154f645b482455b0f52
SHA256

afc1617a25607e155c5572b3f66569686d5c9d87ad9b5b6e367186f343ba4299
SHA512

57cd5a866f632ca5dc56e8699d7116e458f484a820c4c5186588cb0a39fc488358b8b777acd41424ed355c3d0b3057adb64d101d9c87ca7df7c7b08381a5af17
SSDEEP

196608:5m5Mrd7MrdaUJFGyEghVJ3BHLQ/rEuaFF14O6mRyl/O1KUuYsQ:5mWyZJwLaJ5QTElMAYhDUuYr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c9b09eba8039ae2286db960ddbe8fa8_JaffaCakes118

Files

8c9b09eba8039ae2286db960ddbe8fa8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

215197b667f2f99a9921bb26bd16f9d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
CreateProcessA

Sections

.text
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE