4179d59b61ed94145747f40beea5ddfd_JaffaCakes118 | Triage

Sharing

General

Target

4179d59b61ed94145747f40beea5ddfd_JaffaCakes118
Size

153KB
MD5

4179d59b61ed94145747f40beea5ddfd
SHA1

0f1f99eb53f59915427fc59a671c1f13f6cdf6bb
SHA256

841a61a44efab4ecfeb8176858a78be8eef33f3a1356af663bf9d428a94feb2c
SHA512

55407544a35298e41a881d6c6807183a74e5e2bb64a3446d21401948178e44b5360c261104d212da172780db697ead0cc78270ea0834d36b08a58945c98f042e
SSDEEP

3072:Miqx4+yI57a/m//SNKKXLaPDGmQU6oUpflzaCT0Uf5:+x4vI57aO/qba7rQh7flzt0Uf5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4179d59b61ed94145747f40beea5ddfd_JaffaCakes118

Files

4179d59b61ed94145747f40beea5ddfd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c2fe897ff9207ddcc74ee35f8b95f8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE