d088d01850c06c8409835e2f7a95980f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d088d01850c06c8409835e2f7a95980f_JaffaCakes118
Size

61KB
MD5

d088d01850c06c8409835e2f7a95980f
SHA1

0bf95fefa93b3d6d5d03fc181802cc9499494785
SHA256

1601712f2a66cb917cde38b0383ccb44ac7ae8c9a10071246a2edeaca76c611d
SHA512

c2303156fd8ee436cf4157fba1857cad2e8fc2fbdcde16357f717f16b140c19ff4f896883d2282c6999dbb13f08b70ac671047815cfebc62bbb126a9febc1053
SSDEEP

1536:EouU6Jv9Gn4wgqdDoYAv56PTzfJUfSoLrU5V76cnZs2Pkz:EtV9Ggk8tv56rz+SoL2F6+XMz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d088d01850c06c8409835e2f7a95980f_JaffaCakes118

Files

d088d01850c06c8409835e2f7a95980f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a0e98085a0317fba6a2975c1b5dc835

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
RegisterClassExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetCommandLineA

urlmon

URLDownloadToFileA

Sections

.text
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE