46feb86304ea1d89bde25eca63935255_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46feb86304ea1d89bde25eca63935255_JaffaCakes118
Size

298KB
MD5

46feb86304ea1d89bde25eca63935255
SHA1

702a78e4b852d7acc095a49df8cb73301e9b12bf
SHA256

12d8bf97efbf268d215d1ac2785f7183077bb190b12d7e8268f640b979d779f5
SHA512

d6cfd45338c37088796ed000f3f74d19809d0883ef255182f23723869413835073bc7ce332e658b93b28374b77f4310a29795b90fda66de9c8aafadf2538818c
SSDEEP

6144:pQa39DEYsGm0IcvBg51XcITOJVMoUq1Y+vSpeqvHt9fzyjxdKwd:pQo5Rq1XczVML+vSlLejbl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46feb86304ea1d89bde25eca63935255_JaffaCakes118

Files

46feb86304ea1d89bde25eca63935255_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf1bece4be486bf307c4d5b498277873

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetModuleFileNameA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE