d330df503dca671ec0c39b41d7cb6dab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d330df503dca671ec0c39b41d7cb6dab_JaffaCakes118
Size

153KB
MD5

d330df503dca671ec0c39b41d7cb6dab
SHA1

011546b3cb9091339a776c9839d15d898c341a8b
SHA256

3348f505cee65c2a152ea2499999d3ad4533d9fe0873e6b3cca86c1c212701a2
SHA512

8ab4fdcf275163f80be4eae62bcc478b46a2db69dd959d442aeca6034b8994ff52ed501b627ac38d69e0a9e567867df3f8cf178901f5c091c84e684c4c96ea81
SSDEEP

3072:utY1eSMtuzE1IZhzSZUJQXasLSOMSYRf6E7MUD:11eSM8zE+byUJQqOM5Rf6Ez

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d330df503dca671ec0c39b41d7cb6dab_JaffaCakes118

Files

d330df503dca671ec0c39b41d7cb6dab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c2fe897ff9207ddcc74ee35f8b95f8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE