a04d59f84ee32fa60d50fec52a6e39cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a04d59f84ee32fa60d50fec52a6e39cb_JaffaCakes118
Size

142KB
MD5

a04d59f84ee32fa60d50fec52a6e39cb
SHA1

b92729fbba38657959408b6c7b07cf9e1a452ef2
SHA256

6a1ddf7624d53edcd099c006b9424288fbd139bea814d0e1ece2e04c61f35a7c
SHA512

c4adde625959fdb05807f1566bcdcc52527ff25851e71f45d1c6d3a23a120b8cd08d6657da09ada1b59aed3700d1c3dd0f615bc2dba492f74720639b708861a3
SSDEEP

3072:gbrhRYmL4DQL7oqmVqTlnOFVYCMS1TxlU9hCP4OYVNoUwe:gbnnzXjcOln8YCnKOPjYVNoU5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a04d59f84ee32fa60d50fec52a6e39cb_JaffaCakes118

Files

a04d59f84ee32fa60d50fec52a6e39cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

001f2e78d1de56ced69d49fabf3fc184

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
lstrlenA
GetPrivateProfileStringA
VirtualProtect
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
UnmapViewOfFile
ExitProcess
Sleep
CreateThread
GetTickCount
GlobalAlloc
SetErrorMode

msvcrt

memcpy

user32

wsprintfA
MessageBoxA

urlmon

URLDownloadToFileA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 137KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE