6209f4e083c3eee09161510367f6804b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6209f4e083c3eee09161510367f6804b_JaffaCakes118
Size

148KB
MD5

6209f4e083c3eee09161510367f6804b
SHA1

ea4c78511e4fff1985e817a5b1fdcf73f5964d49
SHA256

0893b8b3b581840c62c3632475aeb5ec08fc22941a7c110d04511230bd478145
SHA512

29e95a14404b635c2ee7e81a85773a77a12e5cad8f8bf2e28b632096ee15e71dc711c6f6776809bb0155c4ec815c53e74c4274971e187015f5d294559ab7f3f5
SSDEEP

3072:zYkjp6DBW7bw9D6SMf4wrYPgjZZA0yFIsOELo7baUapoROG0F:8kjHUVnWzjjZsGsOzvraQ4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6209f4e083c3eee09161510367f6804b_JaffaCakes118

Files

6209f4e083c3eee09161510367f6804b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58bc315907d66bd6874cde66e709755a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA

msvbvm60

_CIcos

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE