78f7cf07a28c6e912958dc5544759f03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78f7cf07a28c6e912958dc5544759f03_JaffaCakes118
Size

153KB
MD5

78f7cf07a28c6e912958dc5544759f03
SHA1

ce01f9dd7c59defb89c06a724bc80dc5ba0c7d27
SHA256

fa9b43ba1e86421d132e225ce1b89d9b0c551065a1671b723db1f843e8bc2972
SHA512

78a1bab96c68137f16462e4e1c4393d7837bd1a83fe4c388e3178d706d8602fcc4deed51d0d64463b2b3e2d05a81daca3b4994983133c6effd317901dec9b801
SSDEEP

3072:xJADBjlkK9YQkiKmDrZ40KheACbRp9uhgPqIYyVNZDZJX62lsq:xOBh39YQkWvZ40Kh7Sb9uhg3VDDZJq2F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78f7cf07a28c6e912958dc5544759f03_JaffaCakes118

Files

78f7cf07a28c6e912958dc5544759f03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c2fe897ff9207ddcc74ee35f8b95f8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE