292fc04700e792c56a52b741373b34e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

292fc04700e792c56a52b741373b34e4_JaffaCakes118
Size

370KB
MD5

292fc04700e792c56a52b741373b34e4
SHA1

ba225d9a97c78874d9b7d117e47049b593a93fd7
SHA256

9fe6ead6cf9e7a34b1312591779d20845d2269ea0753441004e94a0c9fc396a7
SHA512

06e39d833a239d42e98005f914e0746d51d8f9d8bf3c9376088e20d84096f205a23db92169217c35926c3598d1b4bb3d95dd5fdf4b2bb95cdbae1ea77d236a8d
SSDEEP

6144:mszphmljai2Rm9oqs6zAsy9j73f4jAH6OOgRqjpSeHluP56oymuRr:m6cR2R0Asy9j73f4UQ7/HRoymOr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
292fc04700e792c56a52b741373b34e4_JaffaCakes118

Files

292fc04700e792c56a52b741373b34e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea24632d093e05ed21274283190f71fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA

msvbvm60

__vbaVarSub

Sections

.text
Size: 23KB - Virtual size: 25.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE