04f1722b01d5f4e80e3547266afcebbe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04f1722b01d5f4e80e3547266afcebbe_JaffaCakes118
Size

40KB
MD5

04f1722b01d5f4e80e3547266afcebbe
SHA1

b9336492390f4c93833248d90361dc6873e43342
SHA256

a37c4582bd2d987d27e8944e1ae43b0865bebe1f45fd7ee0605d5cfc7dbb7f24
SHA512

b6541fd8e9eaa3886739ebdf55750b31fe458a0f8270a13729bdc87415c8ff59cddce78ea2789c01419736067bdda6cd1c31ead07d1e4d0783d2733f513a05f4
SSDEEP

768:d+OM1jzpte7sXPaX+gpjdjY4iq/aiwKLB9ccsm5eHigweT9/7COQeRMm7v:4VM+PaOgp64bS2B9c6smeR/6eRMm7v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04f1722b01d5f4e80e3547266afcebbe_JaffaCakes118

Files

04f1722b01d5f4e80e3547266afcebbe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9fefebdc77e9ff5c9dac38b5078d0f09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceExW
ReadConsoleW

user32

EnumWindowStationsA
LoadMenuIndirectA

gdi32

GetTextExtentExPointA

Sections

.tls
Size: - Virtual size: 226KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasm
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 1024B - Virtual size: 838B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 279B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ