4140a947c5f4d0ae2e97f3a2dcf40e58_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4140a947c5f4d0ae2e97f3a2dcf40e58_JaffaCakes118
Size

201KB
MD5

4140a947c5f4d0ae2e97f3a2dcf40e58
SHA1

78b71fb5466be1954b4de7a87048428f5dce94fa
SHA256

432160c674ee20b531ae5cb605fb192cdf8446708aa008c9a9157994f54850ae
SHA512

24b22acbd03bddc61ecf158a687549f968380cca82499867f8c160e8230f546bfa1498292d1b7662d3a55a138b739b5c3e7e06f74d2342c40fc3a74890d21cb5
SSDEEP

3072:lKO7Glqu8WFbaGW0jmfzFeNYzuXYhQOzMl/HO8WwK:ppunOGAzFeNYztQjlf9J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4140a947c5f4d0ae2e97f3a2dcf40e58_JaffaCakes118

Files

4140a947c5f4d0ae2e97f3a2dcf40e58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

faf671c9707d8c02ba77e642a4da5b10

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MulDiv
lstrcmpiW
SetCurrentDirectoryA
IsDebuggerPresent
GetDriveTypeA
lstrcmpA
GetConsoleOutputCP
GetStartupInfoA
GetLastError
GetCommandLineA
GlobalFindAtomW
GetCurrentProcess
DeleteFileA
GetUserDefaultLangID
GetOEMCP
GetACP
DeleteFileW
GetCurrentProcessId
SetLastError
lstrcmpiA
GetThreadLocale
QueryPerformanceCounter
GetModuleHandleA
lstrlenW
GetModuleHandleW
GetWindowsDirectoryA
GetVersion
lstrlenA
RemoveDirectoryA
CopyFileA
GetCurrentThreadId
GlobalFindAtomA
Sleep
GetCommandLineW
VirtualAlloc
LoadLibraryW
GetTickCount
GetCurrentThread
GetProcessHeap

user32

GetSystemMetrics
GetDC
CharNextA
GetDesktopWindow

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ