40c412849e96f5f9bad0f41ffc5f1f7a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40c412849e96f5f9bad0f41ffc5f1f7a_JaffaCakes118
Size

153KB
MD5

40c412849e96f5f9bad0f41ffc5f1f7a
SHA1

b2eba79af0d4e96c4bbea6119cfd7a844956e06f
SHA256

ba3b2d3471f37b6c27757e611422dcf812eefadb471bfaf4579474bf9f5e6063
SHA512

2863292e62b4b3ef526a921a3a294c6522eb77e2ce260bba071be38fa8d2b1002a6131787d0d965e43cb4a75e2d79484960644a29b84367239dcc6c5fe84aaa9
SSDEEP

3072:+KIsqhbeFcKhBl4AHu4oC35yRoukOZMEPU3CsFHryJXz4nlXnYVgedBzMLo:VIsqhmcK72ApyTkOZMEs3rKXz4hYVgeR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40c412849e96f5f9bad0f41ffc5f1f7a_JaffaCakes118

Files

40c412849e96f5f9bad0f41ffc5f1f7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c2fe897ff9207ddcc74ee35f8b95f8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE