970d8a08f614ed3cfbb34ea029379e99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

970d8a08f614ed3cfbb34ea029379e99_JaffaCakes118
Size

157KB
MD5

970d8a08f614ed3cfbb34ea029379e99
SHA1

0910a8647307ff1178f946a6c36f5a27172e1d09
SHA256

2e22dbfe35551b92b773e585dc43936b29d976aac804ccd801061928189835bf
SHA512

fec7dffdb22c1c408296e9edccc5ab918a3836accb4bf6447097d751b0aa56ab125b92798eac5631540359df9135c5bdf560608e4d8a6b00e35a0b1ff07c2c31
SSDEEP

3072:Qm56id9BkAbjP8jyGUooAOm4GfFDnuD8jTXPQCX+Jv6qwVQ7VZ6:j5VPBkclG0pm4GduDaT1qwVQ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
970d8a08f614ed3cfbb34ea029379e99_JaffaCakes118

Files

970d8a08f614ed3cfbb34ea029379e99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea24632d093e05ed21274283190f71fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA

msvbvm60

__vbaVarSub

Sections

.text
Size: 21KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE