2d96383811dae3c27f92ad3cedd2f452_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d96383811dae3c27f92ad3cedd2f452_JaffaCakes118
Size

87KB
MD5

2d96383811dae3c27f92ad3cedd2f452
SHA1

78d6e7e144e7ae1e94e40cff8daed6814b66a560
SHA256

ef94b53e6ef2bedc93fa2af27f4ab8bb94ce5719c46a27abd18e5e4fe6090a53
SHA512

4d79c7566b7d60f4e8025bd3273c519958309f500aee1d1a2d845dd9feb43f45d0cf6d922c2c749a8e1a0ed23f6e3e034a4706c692b878948eb03bed9eafdea1
SSDEEP

1536:8vPoTgFpm+sLPcvdvTpmIDysWFgEnoDVGa7VvdgHKtq+6tDEJ3gEg9qtPN:ooT6pmZPcvdvTpmRs3ZGwVvWqwdtwJht

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d96383811dae3c27f92ad3cedd2f452_JaffaCakes118

Files

2d96383811dae3c27f92ad3cedd2f452_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a0e98085a0317fba6a2975c1b5dc835

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
RegisterClassExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetCommandLineA

urlmon

URLDownloadToFileA

Sections

.text
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE