f3857ccfe9d455a0c30cdb8a6af7043d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3857ccfe9d455a0c30cdb8a6af7043d_JaffaCakes118
Size

153KB
MD5

f3857ccfe9d455a0c30cdb8a6af7043d
SHA1

f343e1f853fa1187af784e9ec41a55ee150aebad
SHA256

841b21f5c6f017f9ad9605f03e9a06b3d44cfb2f31a1f8d29698a2afc106ebb0
SHA512

a8bda0f84dfefc31038f1b851f1a232f919fdeaa5c9e371e6e02690e807a43f91150b3d128bbf5b87f69143baa117435b3e16ae4ffe6b788d51a00dbd6a0511c
SSDEEP

3072:C2hDFpRZnV83dMAvFf66pdYdLz47a7n6ZQVzJWslpRoJvCyv+aZe2q9Ppky:CWRZnVY9fpdYdcazDWsPovVGVF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3857ccfe9d455a0c30cdb8a6af7043d_JaffaCakes118

Files

f3857ccfe9d455a0c30cdb8a6af7043d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c2fe897ff9207ddcc74ee35f8b95f8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE