5c0273b79f2aa778e86bdfbbf8298bd1_JaffaCakes118 | Triage

Sharing

General

Target

5c0273b79f2aa778e86bdfbbf8298bd1_JaffaCakes118
Size

139KB
MD5

5c0273b79f2aa778e86bdfbbf8298bd1
SHA1

c10a6693813997c3ae69828737da3f5256daf015
SHA256

31b15abc468bd4e1e14edcefc02c497c4af558d5209301fc787fd8052b2744e6
SHA512

376b9df5213df884632b0e97823890c2ff1399bea1df647da49a9c654fb9a34f046de7c55dc727fce9c95bab35ac06178a50047d54ea19c5f2a271d57a2bf085
SSDEEP

3072:VxaLWHAX5O0OyQMFRVTX1KYrR9lcUJvJv8bqDtYz6ozyqLTItsJH:VgLeAA/eFRhXAYNXv8bqZuvzN/Itw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c0273b79f2aa778e86bdfbbf8298bd1_JaffaCakes118

Files

5c0273b79f2aa778e86bdfbbf8298bd1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

35ecf5d45c32d3dfef978bba887e0dc9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord2846

msvcrt

_controlfp

kernel32

Sleep
LoadLibraryA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

comdlg32

GetFileTitleA

advapi32

OpenSCManagerA

ws2_32

select

urlmon

URLDownloadToFileA

Sections

.text
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.x0
Size: - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.x1
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ