c8cf371fedac4852721674886f2ee722_JaffaCakes118 | Triage

Sharing

General

Target

c8cf371fedac4852721674886f2ee722_JaffaCakes118
Size

153KB
MD5

c8cf371fedac4852721674886f2ee722
SHA1

ff67879d307c227531c8ce726cf7d7dba6e7949b
SHA256

727b0d6b0b515a8ca056495994db9439b9fe05c83a00cf3715193ed309523c79
SHA512

9541a2052b82cb99c2366ccdca76f9bb9d2f24e2ef006bb92f3515cb40e5b3125ecdc4a8b4cb155dafb2d6e1f9520600f53f42cb93f2e7a771299f53a3aaadd3
SSDEEP

3072:66pJmurMCfdN44R8QGkHkQs/nKHfW4btcbzdoQ3u1z7x:66fmurM+ZhGukQsvQHWnuQehx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8cf371fedac4852721674886f2ee722_JaffaCakes118

Files

c8cf371fedac4852721674886f2ee722_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c2fe897ff9207ddcc74ee35f8b95f8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE