b976ebf06c30e88d6cc1c8e92fa4cc62_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b976ebf06c30e88d6cc1c8e92fa4cc62_JaffaCakes118
Size

153KB
MD5

b976ebf06c30e88d6cc1c8e92fa4cc62
SHA1

091fe37fb9f043feaf428be7eafd8c2212c285af
SHA256

1a869abb4fb5606b6a52970025026907c27ceb788aa5dfc1a4ed259bf1b83feb
SHA512

fa8fd17b1f51c988540e243ed14700acc8040d7be679296068b261f2481c96375a3b9f700297dac148605352167ff6e5bad72180631fff4fa23866d2e8f25532
SSDEEP

3072:av1y8sJ6vaKcSlwEjXxp4qHuWEFWo1DnENu:avc8sJMLpb1AFWuDENu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b976ebf06c30e88d6cc1c8e92fa4cc62_JaffaCakes118

Files

b976ebf06c30e88d6cc1c8e92fa4cc62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c2fe897ff9207ddcc74ee35f8b95f8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE