40c2e620d763ea48632e299a7c7751ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40c2e620d763ea48632e299a7c7751ce_JaffaCakes118
Size

82KB
MD5

40c2e620d763ea48632e299a7c7751ce
SHA1

0cf8c2be20e9ae24256ba6de6c7a23fe180b8a95
SHA256

9bbe13c58833b329014765f614924fb6a8baefa4282c858f45ce806a5c28c067
SHA512

16fb9b3286d1e56d6b1e1d91de7d85c61050777f345e00d18fdb06776d05ff96fb847ba010629e4ae3cf19704d3ecc5c9468ceda74a152e9f2a2646901a4a3b7
SSDEEP

1536:8vPoTgFpm+sLPcvdvTpmIDysWFgEnoDVGa7VvdgHKtq+6tDEJ3gEg9Y:ooT6pmZPcvdvTpmRs3ZGwVvWqwdtwJhb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40c2e620d763ea48632e299a7c7751ce_JaffaCakes118

Files

40c2e620d763ea48632e299a7c7751ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a0e98085a0317fba6a2975c1b5dc835

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
RegisterClassExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetCommandLineA

urlmon

URLDownloadToFileA

Sections

.text
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE