73b703122d0da20c5317ac12062dffcc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73b703122d0da20c5317ac12062dffcc_JaffaCakes118
Size

153KB
MD5

73b703122d0da20c5317ac12062dffcc
SHA1

fbe46beafdedf2113b1733fc348c2930c6a105f5
SHA256

05666767ddacd05feac79080a17a74e322188f058a5cbab9771119cbacdb0d65
SHA512

fcaddedaa990e5553c7175a6e00cc9ab48df3036f2a2dd75f201fd02a2cead8c98d17b2eabbe4e67f7e0bd9e5ec84023fb473345270ca868e507b9e55bde3f8c
SSDEEP

3072:GJkyFCStB3uJL89knoUi7lW1k8RZEZaWTAkDDHDdOZUmtnBq:G5JB31CoUi7wC8RZoVFZmm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73b703122d0da20c5317ac12062dffcc_JaffaCakes118

Files

73b703122d0da20c5317ac12062dffcc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c2fe897ff9207ddcc74ee35f8b95f8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE