0edc467f3b86f53535a719e453f5a073_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0edc467f3b86f53535a719e453f5a073_JaffaCakes118
Size

482KB
MD5

0edc467f3b86f53535a719e453f5a073
SHA1

e0822b91689a5fc95d1b66a671f47480a8f75949
SHA256

606e81c9fdf406b38bbcec57e37d92a8984edf8162fc31b0c0adfde23eeb1725
SHA512

814d6872f2634e076c52037dbfe69274798c8a72fb613612fbd7d9443802faab488f8d0af3ddae4fb4e3fc4239acc2fb45b72600ada9226515124fcf0b201707
SSDEEP

12288:oV/ocFpONyIQHJRofid5Ml6lj6FMvwEvHOz:0/ocZJKSMQxWM4Emz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0edc467f3b86f53535a719e453f5a073_JaffaCakes118

Files

0edc467f3b86f53535a719e453f5a073_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22b7b782187cab752d493a6da3dd48d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

Sections

.text
Size: 23KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE