f70371f5fa685d9c181c07f5dd2870b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f70371f5fa685d9c181c07f5dd2870b3_JaffaCakes118
Size

48KB
MD5

f70371f5fa685d9c181c07f5dd2870b3
SHA1

15fa4161798be6daf6d4c7e43c6a1fd5a58576fd
SHA256

94e648f0e0aec5bd4164c0facd94c4ce9705359dc6bed17ad8a661b34db30c0b
SHA512

ddfdd7ac50e4052e6ccfb27e963472ea80ba1b8317241b0c3f19807989218f230fe602d582b1e4f3657fd8a8f14e04a6e8d348b1e6a15d9244bd722bf38fd8cd
SSDEEP

768:zmCWlfJNWUNEM5LOim68cBJH5QVzKUlx/zH25+qViSPElxrAd0nMM8rJmxcwVoOS:b6jKMhOnzZK43FtXMxdEcwVob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f70371f5fa685d9c181c07f5dd2870b3_JaffaCakes118

Files

f70371f5fa685d9c181c07f5dd2870b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac7392635d40a1bbddba7bf85ad4e52a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit

kernel32

lstrlenA
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
ExitProcess

mfc42

ord1979

winmm

timeGetTime

wininet

InternetOpenUrlA

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qbh0
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.qbh1
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE