ae14685f71385839110096eaed744fdc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae14685f71385839110096eaed744fdc_JaffaCakes118
Size

153KB
MD5

ae14685f71385839110096eaed744fdc
SHA1

9a3435c40e3662268299a37c06a18b587345058c
SHA256

6832db1dfc6e01cf9fe8c7f1adea5f28e7acfc778e08e8255f78a0047c313aaf
SHA512

a38ef6bf16d67fe9fb03582b6fa3642402671990fb46eb6b53b579c7862d7ea4845f5b538a4b5f745e59ab88255ab725731b9710716b3cfe62b5f77fbf3a9b16
SSDEEP

3072:cLmAvh9s1Uc1pt8qY0DFkNTxzocQbiOmjyfNWWhmUYwEjPe+9:A7vhOTXt8EOB1oruOGyfzhmdwaP9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae14685f71385839110096eaed744fdc_JaffaCakes118

Files

ae14685f71385839110096eaed744fdc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c2fe897ff9207ddcc74ee35f8b95f8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE