741f1b98ae917be1d21e4dbffe13492c_JaffaCakes118 | Triage

Sharing

General

Target

741f1b98ae917be1d21e4dbffe13492c_JaffaCakes118
Size

19KB
MD5

741f1b98ae917be1d21e4dbffe13492c
SHA1

fe718da247088a2c5e1c53f5a955705229066d2a
SHA256

b7c5f081ed7412a90823260813ab239147adfe1ca6c6a557d6ba1fa220487791
SHA512

8835f45a9c094b39725de82665dcd18b245029ce4e9410582707dfdc9c0c12f6ee36c9e0cf26f8cdbed964d0fef084dd33ffad4a261b0330bf868089fce77784
SSDEEP

384:uf3ILHa4D0Pf9w8dfYuWpyJUQ6u5iZ5YsXOQOO265MLlfeQDUNawxYM5M:uvIL10XeqQJq6J/YcdX5M8wE5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
741f1b98ae917be1d21e4dbffe13492c_JaffaCakes118

Files

741f1b98ae917be1d21e4dbffe13492c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62bbabd25916ce71c965b9443b489111

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDesktopWindow

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
CreateThread

gdi32

CreateDCA

Sections

.text
Size: 19KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE