395eaa51b775cf638ba4e71bf41de06e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

395eaa51b775cf638ba4e71bf41de06e_JaffaCakes118
Size

42KB
MD5

395eaa51b775cf638ba4e71bf41de06e
SHA1

8d25bbdd848403798c62e5b43075dc1ee7302113
SHA256

ea2d31992d1cc7de608f3937d15493f6096e4a7bbe307446f0e7ad6ac6862ebf
SHA512

f970de5a1fbc4da43f2484f55bbe52234658303c3997cc7252a7bcf15e3ff45941d50b2eadedccc4d71c4a96c8eb927914731d085e9150c6c326a6a30243ba0c
SSDEEP

768:7l2muODMj1UoHvkykiQsqiNp265nFuWwbye1/qFkKn+k+HbvrAy61aZv/YeF5:7nuuMj+3yki/qA2KC3/PKnebvrm1pi5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
395eaa51b775cf638ba4e71bf41de06e_JaffaCakes118

Files

395eaa51b775cf638ba4e71bf41de06e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c2fe897ff9207ddcc74ee35f8b95f8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE