ff3eb07ec595ff632513b7375e1f1b87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff3eb07ec595ff632513b7375e1f1b87_JaffaCakes118
Size

21KB
MD5

ff3eb07ec595ff632513b7375e1f1b87
SHA1

0c0608caf0167617d52f0f3d545472384cb6734a
SHA256

9b7408182580d3504b9a9483b65114c88ec9f1abdffbd6903efc96798b479486
SHA512

b16bb1790f5556726480dae26257592e8a666dc5c0ea6949a0de35d309b9aa38b5e22bdc664a9783954ec53d96394ac710d86a2401087d70fbdc61b95cd6ac39
SSDEEP

384:9yXDZFlooGvvDuSuadd/SRFQmU2RRgd9wuKpLETqxuTawxYM51+i:9yXnloeRoYQ3QRgdiFOTEu5Qi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff3eb07ec595ff632513b7375e1f1b87_JaffaCakes118

Files

ff3eb07ec595ff632513b7375e1f1b87_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58bc315907d66bd6874cde66e709755a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA

msvbvm60

_CIcos

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE