4cd27bcdf43e502d093c7646db9d1415_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cd27bcdf43e502d093c7646db9d1415_JaffaCakes118
Size

156KB
MD5

4cd27bcdf43e502d093c7646db9d1415
SHA1

0a2f68a64c6fd81eca0ad15806361a0d01a8ae11
SHA256

1391b98b9b69e9d814cc395fa9549e749ae549db7e14cfc7e030783ec4c32085
SHA512

c7e53d0340ae8103913212d00edfcb9532e7cdc00eb8ae2f2ab29c8e1d0d3224d90f58c4a82df8e2f746f837933b7c7d2164a8a5dbb38dc0e4bddc89ba5d4f33
SSDEEP

3072:YtKY+I4r7TqMxvO0CbU38jOkfOZPKT+gGDWc4RHImKo:Y0YjOV20V38jx+IOWbdD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cd27bcdf43e502d093c7646db9d1415_JaffaCakes118

Files

4cd27bcdf43e502d093c7646db9d1415_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58bc315907d66bd6874cde66e709755a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA

msvbvm60

_CIcos

Sections

.text
Size: 26KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE