40d30f6612ab8da126ebbf4b0e48ae8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40d30f6612ab8da126ebbf4b0e48ae8c_JaffaCakes118
Size

56KB
MD5

40d30f6612ab8da126ebbf4b0e48ae8c
SHA1

4e98d1e5a8e16c7bd6dc2931a1691a79d5a3d66e
SHA256

59556e91d8f0cbf001610a86321504c01b04d21811b2d60263563372ab8bb3f9
SHA512

341d6f3d7b47ae2f7a95d8a94992a6d8098e88c493902b99bc7f13849f38bc14e72e78559eef3008e587f9f314d20eeb07ed28bfa8f5816c63a261c31ff70479
SSDEEP

1536:w9GIVVxhmrIkfWrmHYMybjr9gjAjRR4oY:OR/AIkfA1XQuRuoY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40d30f6612ab8da126ebbf4b0e48ae8c_JaffaCakes118

Files

40d30f6612ab8da126ebbf4b0e48ae8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a40366a609ff859800cbdc9f4ae0b5e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleInputVDMW
GetConsoleNlsMode
GetCalendarInfoW
GetLogicalDriveStringsW
HeapCompact
GetShortPathNameW
RegisterConsoleVDM
lstrcpyW
GetDiskFreeSpaceExW
GetDefaultSortkeySize
MoveFileExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE