17a59e7dc08d7c7fcea881416d3c8912_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17a59e7dc08d7c7fcea881416d3c8912_JaffaCakes118
Size

153KB
MD5

17a59e7dc08d7c7fcea881416d3c8912
SHA1

e0b60af74e43f3101bf98f4923ef89045dfef613
SHA256

e7da55a25a2665aa7b2c0555efb7d669183183f7a4b7f5deb59c55a10797c079
SHA512

2ad75a76aba1563d3134b6e091a162864ca8c7eea5d1d1472bc810c4e552391ff3903f93c4d3b7ae780a94e70ecb6c2337a44f8751694edf6c32e0d787fe39a7
SSDEEP

3072:Va7g9Pm+f9WuzLRNKH8qhGjhTpX0LZZ5PGBrA9jb+0qU0FCHz7DSMGCF9dGmBu:VaH0WufRNKvygZ3PurEjMfgz6MGC8mY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17a59e7dc08d7c7fcea881416d3c8912_JaffaCakes118

Files

17a59e7dc08d7c7fcea881416d3c8912_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c2fe897ff9207ddcc74ee35f8b95f8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE