40574a32a89b71380af6bd46c0237b3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40574a32a89b71380af6bd46c0237b3b_JaffaCakes118
Size

122KB
MD5

40574a32a89b71380af6bd46c0237b3b
SHA1

be2e8fbd08314bdd6398162549d0964b44fa53aa
SHA256

d05082b1c091e8aaa9fd41c9918708c419f0d658233f5d3e2d2f34ce4d4847fe
SHA512

2444f86e9f19f023595bab8fc1f087b4d66537296087dde6e2f1066efdcd4b29bdbfaec6d1c1b74a4f248db7984572113b9a1ace67f9c01db52787f101b78b4a
SSDEEP

3072:g1E5K/rtzQ3sRf2o7xkf0acqctI40ARceFE3pc0mCs7mKeoQ:g1v/rNF5x/an4XRbFqwJO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40574a32a89b71380af6bd46c0237b3b_JaffaCakes118

Files

40574a32a89b71380af6bd46c0237b3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

953c971d017c7c4de8f452b68ee34dfc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
VirtualAlloc
LoadLibraryA

user32

DispatchMessageA
TranslateMessage
GetMessageA

oleaut32

VarRound

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ