b6952f14842fc9db3fc14d151206b3bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6952f14842fc9db3fc14d151206b3bf_JaffaCakes118
Size

96KB
MD5

b6952f14842fc9db3fc14d151206b3bf
SHA1

2be669611b8c45e3f6b5b8dc887d878ecc13ee0a
SHA256

e8235d2eec63d8022e9cc36b058e5826461707e9fa8f78a9273d41495251b149
SHA512

32d7b12b07020128386f8bd9746c676ffbc29a9149bb50ce1152819d2a531b779d6feb768c48d67ef6fdb1af9bd2583cca689467929ad9b6d6125b365db0fbf3
SSDEEP

1536:EouU6Jv9Gn4wgqdDoYAv56PTzfJUfSoLrU5V76cnZs2PkdATo9WvYrsg/G18J0:EtV9Ggk8tv56rz+SoL2F6+XMIs4k0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6952f14842fc9db3fc14d151206b3bf_JaffaCakes118

Files

b6952f14842fc9db3fc14d151206b3bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a0e98085a0317fba6a2975c1b5dc835

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
RegisterClassExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetCommandLineA

urlmon

URLDownloadToFileA

Sections

.text
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE