40ea141fe1f91c550c7b54b14cefe24e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40ea141fe1f91c550c7b54b14cefe24e_JaffaCakes118
Size

63KB
MD5

40ea141fe1f91c550c7b54b14cefe24e
SHA1

e1e77214febed7c8a8a2e50e6ccfe3cf91ee9cbc
SHA256

d640306483bbd2b095c2d8f714817996a76fee8059b81f299401b02a96dd5ce1
SHA512

bbd66d0638c50b97b781b0d904e1f1d3306f575533a31722d4d1c167016b3c7cc924b7d614466fd6e16db2d4e5a1ab6970b3d8eace0fdd7031ad80f69fa571c2
SSDEEP

1536:7exxxDMYTY6ITMBodBcx00RjW3Z7u7hOSpdhugLa:elTYj4HN6Z7utxpfug+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40ea141fe1f91c550c7b54b14cefe24e_JaffaCakes118

Files

40ea141fe1f91c550c7b54b14cefe24e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d01b347d71bcd300d768bd4009570b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BeginUpdateResourceA
AllocateUserPhysicalPages
LeaveCriticalSection
CompareStringW
TerminateThread
TlsAlloc
MapViewOfFileEx
FillConsoleOutputCharacterW
GetConsoleCommandHistoryLengthW
BuildCommDCBA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE