837ba6a1eec7ba3751b0e7045dfc4355_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

837ba6a1eec7ba3751b0e7045dfc4355_JaffaCakes118
Size

21KB
MD5

837ba6a1eec7ba3751b0e7045dfc4355
SHA1

dc3f285be66c8a3f0e34d9bae3c2f0900dac7239
SHA256

1cd31ccaefd757638251fea590274054d8cd41af446ee04b49c7f0ae3dbc11e2
SHA512

e6ba2e787e44285ff67294c4702c92fcbd46945e5288aca80e6049c88c592fb561db5cae43184901f459b38491e2585ae37428a033c419dea46c5d25911c50a4
SSDEEP

192:4ef9XX+GhZeSfH2P593rRl+iRT1vFjv1Rqh:4a9XO2Z/WP59KiNj5Ih

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
837ba6a1eec7ba3751b0e7045dfc4355_JaffaCakes118

Files

837ba6a1eec7ba3751b0e7045dfc4355_JaffaCakes118
.exe windows:4 windows x86 arch:x86

27017f173055a24fd9cc53254ecb4c0b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapFree
IsBadReadPtr
DeleteFileA
CloseHandle
WaitForSingleObject
CreateProcessA
GetStartupInfoA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation

urlmon

URLDownloadToFileA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 614B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE