41bae2e52d4b0c15391113e5a041040e_JaffaCakes118 | Triage

Sharing

General

Target

41bae2e52d4b0c15391113e5a041040e_JaffaCakes118
Size

96KB
MD5

41bae2e52d4b0c15391113e5a041040e
SHA1

3a2738311c175e3b1e2dc65d8f4ea6538d7a4d3b
SHA256

5c7043875fd5315e2ea8796f0ea8488580609c3c8c1b731e315e2b287413d354
SHA512

c0e135ab8e5537be37fb19eab7fcdc7e6ecd06924b780f95dcdf91354d5afde3311009a64e16fe8b6aec227cd389e78282f65b136330999c77edf6fda311d1e4
SSDEEP

1536:QS2O1O9UoHgCa10gdVvnC1IMXpvooLfgjY3AhZiCpyUwihd0ez:QlKoLaOqVnqpA9a2yQse

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41bae2e52d4b0c15391113e5a041040e_JaffaCakes118

Files

41bae2e52d4b0c15391113e5a041040e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f8716740733854a06214945701e215ec

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
FindFirstFileA
SetupComm
QueueUserAPC
DosPathToSessionPathA
GetCommState
GlobalDeleteAtom
FlushFileBuffers
GetProcessVersion
UnhandledExceptionFilter
lstrlenA
lstrcpynA
GetConsoleHardwareState
IsBadReadPtr
SetThreadExecutionState
DeleteCriticalSection
TlsAlloc
CompareFileTime
VerifyVersionInfoA
GetSystemDefaultUILanguage
GetCommandLineA
GetStartupInfoA
ExitProcess
InterlockedExchangeAdd
GetVersionExA
GetOEMCP
GetProcessVersion
OpenJobObjectA
GetLargestConsoleWindowSize
CloseProfileUserMapping
DeleteTimerQueueEx

Sections

.itext
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

WEIJUNLI
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA