40fcc73440ec68ca2545b289fa79274b_JaffaCakes118 | Triage

Sharing

General

Target

40fcc73440ec68ca2545b289fa79274b_JaffaCakes118
Size

6KB
MD5

40fcc73440ec68ca2545b289fa79274b
SHA1

8328127e058a7f50790e71e71194ed16e49cb0bc
SHA256

fc0e7aebd4be96b7a159e7d18bba6fa5e46796d06cb3c8adb3b86fdbb20d8336
SHA512

ab2777207f3920021a3048eba38d074c3e230789830798dfcc7483682f7f9cbf00cb6a97feb2b7adb1e835ec785a5f0f820d7bb4aaf7a01b42d3a0db39dd2e5f
SSDEEP

48:ZvZR4vZMb6BZ/W2+Eux5ESX+Dhd4JoBeeZ1HsTWE:ZKZMKiihO2keZ1Hz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40fcc73440ec68ca2545b289fa79274b_JaffaCakes118

Files

40fcc73440ec68ca2545b289fa79274b_JaffaCakes118
.exe windows:1 windows x86 arch:x86

f0267c12108a175e563cb54160a6c8bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetModuleFileNameA
CreateFileA
GetFileSize
ReadFile
GetWindowsDirectoryA
WriteFile
CloseHandle
Sleep
LocalFree
ExitProcess

user32

wsprintfA

shell32

ShellExecuteA

Sections

.data
Size: - Virtual size: 65B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ