0ffb989737fe031d6f9500f960c2e034_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ffb989737fe031d6f9500f960c2e034_JaffaCakes118
Size

314KB
MD5

0ffb989737fe031d6f9500f960c2e034
SHA1

a2c8b59296a0249b844991eff99810950fef8b6f
SHA256

c7f339a67e376cdfbe176246514514416bdaf2837827b686409270e394c20e33
SHA512

c1eb3ace8fd6d2c7cda6b1ab8b910148c27396836cbb9af31d107658f591f6e639da58ec064e0933c23bf55ddb31d8c36a6466fe6ea227769210571af81917d1
SSDEEP

6144:C0n0MblmTRBt3EDkR5RMQIMUAe+IuGCig28tW7bwQlUV:HXblmB3P5SQ0sbKSabwQla

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ffb989737fe031d6f9500f960c2e034_JaffaCakes118

Files

0ffb989737fe031d6f9500f960c2e034_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58bc315907d66bd6874cde66e709755a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA

msvbvm60

_CIcos

Sections

.text
Size: 44KB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE