1878ebcd53839e3d4187efb869ae1502_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1878ebcd53839e3d4187efb869ae1502_JaffaCakes118
Size

252KB
MD5

1878ebcd53839e3d4187efb869ae1502
SHA1

adee9b7b0b387c35b74f7ce2b0e74b7b5580dc29
SHA256

760ea84df0ea87bfe81f6d4dd616a9309460c7aea22696d9c6569ae52a44e24f
SHA512

17757a1b1225881dbc02106e9a4c255a37d11250b970e0996685867ce146b187534fc502546cc8f1e2cb311de6b8a27f148bb9c4ebf5b2125d436a68cf60b0c0
SSDEEP

6144:8jRIQL9OaLUVwQ8i0E1jHApj3t+NpaH4FInwEnatNlTRELzEhA:8j/dL0whE1UR3t+jaH4FaBaJRoiA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1878ebcd53839e3d4187efb869ae1502_JaffaCakes118

Files

1878ebcd53839e3d4187efb869ae1502_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58bc315907d66bd6874cde66e709755a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA

msvbvm60

_CIcos

Sections

.text
Size: 44KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE