40d34773ea63e1130153a391238eef22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40d34773ea63e1130153a391238eef22_JaffaCakes118
Size

50KB
MD5

40d34773ea63e1130153a391238eef22
SHA1

f7185df17560d827e5996500a342bd088d688600
SHA256

ed5461f450637b7af985d1939e4cbd314ed0d77c0b57d385c24c6739e4c7c063
SHA512

0bff7f029880a2f5ab0457af939a6f74ce5858f1b210a9fdcdffe57313a1706a469c78c33a9e5789caacda46f8c97d110ea050bfb6861bd15e9974e4b8f25439
SSDEEP

768:k8Mb9sU4+Vya5Wk7Fy3hJ0RYKebw+5a4+BrGZ+Fi6TBL7y38MQvJ9Fm8sdE7:ZIx4w1vFGhJ0qKAw8+MUZTBXysMQUfd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40d34773ea63e1130153a391238eef22_JaffaCakes118

Files

40d34773ea63e1130153a391238eef22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c8750e03ef3c7ddf04fc81f8f1fa04f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CompareStringW
GetCurrentProcess
GetModuleHandleA
GetVersionExW
LocalFree
MultiByteToWideChar

user32

CharNextW
GetSubMenu
LoadStringW

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 45KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ