0d83067901eea22016d36cac2d6e29b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d83067901eea22016d36cac2d6e29b8_JaffaCakes118
Size

354KB
MD5

0d83067901eea22016d36cac2d6e29b8
SHA1

7f21b6f0a036386eb321e94c90613a4dad883f89
SHA256

ee46c5e2c42e8eceb8d14735e0b0875385251d3749de4ebcb46ad83bd8878cd8
SHA512

26929d8ce9cfef1cad4954ed804fa71e0da3c64b126c52338739a5202fb4c3f934a3908bc68420de446ffe194d0d0b2a10c1ed31ce8b8c88e621e2dcdabeadef
SSDEEP

6144:KEZu8z59a5q0DHDQiXO2zmqrIY+cNoSdi/xS+JSIRO6k:KEZbzHa5q0DHDQZ9xS+Ub

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d83067901eea22016d36cac2d6e29b8_JaffaCakes118

Files

0d83067901eea22016d36cac2d6e29b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22b7b782187cab752d493a6da3dd48d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

Sections

.text
Size: 19KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE