4009dc545698213d52f5d0afe810408e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4009dc545698213d52f5d0afe810408e_JaffaCakes118
Size

369KB
MD5

4009dc545698213d52f5d0afe810408e
SHA1

cb25c97cf571494a2b4b7b7959278a139e0fb8c3
SHA256

813716b420523b9826cb1ec3fb1354d2917650ee478e7f2e4a2bf6cf865f773f
SHA512

3d46f5ce3a8996e3262c6cd967ee2caeee59d27d333ffcb08cf97da5fcc5833a47c202bf8df58bc971218e82a33d6314b71810c9359201b758574df5d2ab3e06
SSDEEP

6144:Xl09had7rTx+a0GOG77zm22dDoga/ATmTC4l1FD2/Ooj:XlIhCn16G7HmTdDogoegD2/OQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4009dc545698213d52f5d0afe810408e_JaffaCakes118

Files

4009dc545698213d52f5d0afe810408e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58bc315907d66bd6874cde66e709755a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA

msvbvm60

_CIcos

Sections

.text
Size: 44KB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE