283075bc827f11c711bb5fc4e4269f3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

283075bc827f11c711bb5fc4e4269f3c_JaffaCakes118
Size

153KB
MD5

283075bc827f11c711bb5fc4e4269f3c
SHA1

ade3ef11dbf1215836176c1cea60985f4cc6abe5
SHA256

f442527927571a48d9558451d49910eb2a7c70da0ba5037f2776c9d1f60d6a9f
SHA512

6ff5cb69e5ef7f7074dbe5d836fa6c86bced2d36df1d53b7c5165a279742c4aab7ced816871f5e6e165f234819d37533198b54499d4f462e3adade7545fe4882
SSDEEP

3072:98UY8JP59bMfORHzh9mAfAlB1mlXfHCwQ5PrmCje11/CIBN:9845ZcOT9fCB1kviwFCyj3N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
283075bc827f11c711bb5fc4e4269f3c_JaffaCakes118

Files

283075bc827f11c711bb5fc4e4269f3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c2fe897ff9207ddcc74ee35f8b95f8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE