40874c3c0acc64c6b13e893953bb4e37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40874c3c0acc64c6b13e893953bb4e37_JaffaCakes118
Size

76KB
MD5

40874c3c0acc64c6b13e893953bb4e37
SHA1

55af0a374e1dc5360aa8df14eafdda175448e29c
SHA256

dc19887cfd8b2a503f4150231936fb326c5935fb9a07ab55d02292c867f214c6
SHA512

c18e37274a14889151bd464c0e1b655655cf7be9ee69289e53749eb8053343a83fc1ddef6b4b0b84eac22a3bfdbb12c7fe304714eb0df0bee950d9a3201a2f8e
SSDEEP

1536:rJiXFR10X3E92hwamGOiQPHtsJLFYM26Kj5QJcaQylygpL:rU1P0nE9/aeZPtspGj6oULpL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40874c3c0acc64c6b13e893953bb4e37_JaffaCakes118

Files

40874c3c0acc64c6b13e893953bb4e37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d80ae433df86db7284fe3ded0cf9e5a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryLengthW
ReadConsoleInputExW
FindCloseChangeNotification
EnumUILanguagesW
QueryPerformanceFrequency
CreateWaitableTimerA
HeapSize
GetConsoleAliasW
FindResourceW
GetSystemRegistryQuota

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 61KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE