41312bec345ede7fd7feafd7a1af035d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41312bec345ede7fd7feafd7a1af035d_JaffaCakes118
Size

56KB
MD5

41312bec345ede7fd7feafd7a1af035d
SHA1

cd986ac0c637577c58ef846b7fbeb2bad856b263
SHA256

43da2243dd1f1ce9ca6ad580e51d3b65541a6b160c582f7c5e671619255abe07
SHA512

08ac0fb25f5e85424afc1cb875db053c46bb245a2cf98a99b08dd578a47ddbf14955e0e15497313f7720419eb546027079f93afe2d98bddc7135b53dbc35fe15
SSDEEP

1536:FdAPmgMb1KJ0fbrdOBhOhc1KLBJjeiW5ji+oDNg/:XM41KJ0fH6hOhc1KLB1eDKRK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41312bec345ede7fd7feafd7a1af035d_JaffaCakes118

Files

41312bec345ede7fd7feafd7a1af035d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b732bb24d845413c48eb6e1770a8c8cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VDMOperationStarted
ExpandEnvironmentStringsW
FreeVirtualBuffer
GetVersionExA
ZombifyActCtx
OutputDebugStringW
SetCPGlobal
HeapExtend
InitializeCriticalSection
QueryPerformanceCounter
EnumUILanguagesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE