4b9840053c12c70007c025c80a5e2562_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b9840053c12c70007c025c80a5e2562_JaffaCakes118
Size

146KB
MD5

4b9840053c12c70007c025c80a5e2562
SHA1

445a703d32a70ab80b460819ddc4894c06b8ca96
SHA256

92cc1344f7fdb570a99b1dc0deb78e688e3bfcc87ba15b5f85a9d3e91922a70e
SHA512

31367fd19b377dba42dbc550c2b07ed6366de6698b3cfd7a9ccbb1a660b8aeb91d08bd6e67ee12fade3b6821e6280567488020a35614e9643cf351a08322f4c8
SSDEEP

3072:l5fXPEn109OyuJUzeFRXVtVPgn7KUf0rxCsNBSrYlW:l5nEn109OH2z0Xlg7KUclCK3W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b9840053c12c70007c025c80a5e2562_JaffaCakes118

Files

4b9840053c12c70007c025c80a5e2562_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58bc315907d66bd6874cde66e709755a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA

msvbvm60

_CIcos

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE