d6e12a7236dfdfb8dcab7e17b822918e_JaffaCakes118 | Triage

Sharing

General

Target

d6e12a7236dfdfb8dcab7e17b822918e_JaffaCakes118
Size

85KB
MD5

d6e12a7236dfdfb8dcab7e17b822918e
SHA1

2b1524ad983cdcadfaf86f482790ad97ea0ebe38
SHA256

9c9bb1adc56d9853c646b52caae3c159ec9bd2b3133b1ee1c772879bad96a564
SHA512

2b7c0133c4a16c36534913d6e8773c945925e26d3f2f50a9d08c1678d8d0167ddb1b44a9e70f392fe0f0ca51f019eb56f7c2fb780ae647d84048623bfdbbfc56
SSDEEP

1536:EouU6Jv9Gn4wgqdDoYAv56PTzfJUfSoLrU5V76cnZs2PkdATo9WvYrsL:EtV9Ggk8tv56rz+SoL2F6+XMIsw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6e12a7236dfdfb8dcab7e17b822918e_JaffaCakes118

Files

d6e12a7236dfdfb8dcab7e17b822918e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a0e98085a0317fba6a2975c1b5dc835

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
RegisterClassExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetCommandLineA

urlmon

URLDownloadToFileA

Sections

.text
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE