41c4f030fb135b743e736a1bbbf917b1_JaffaCakes118 | Triage

Sharing

General

Target

41c4f030fb135b743e736a1bbbf917b1_JaffaCakes118
Size

22KB
MD5

41c4f030fb135b743e736a1bbbf917b1
SHA1

cb167722919c67291a23a86dea058a44037a4985
SHA256

52bcf30cfdde3f08cd18e363009d2d060b10e4852cb23bd4947d3b86cae6ec4d
SHA512

2d9be5aa099b7c4cd1d6cc201739118a98cf9cde48b4c8bbfe92c2bc3ac89c3fb12d8cfe94dd9b143fb6be5545e0eefa4d43d8e2fbbb187eab2bfdb8dcad1276
SSDEEP

384:ecnE0N9TugdeVfaO+BWVHcufg/1uR07MGLfBGmFRRZYcfH6kLmG:ecnHN9T9eBgWVHcufs8+7zVGa1Y8vLmG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41c4f030fb135b743e736a1bbbf917b1_JaffaCakes118

Files

41c4f030fb135b743e736a1bbbf917b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f13fa1a1394daf4bb47d46dbdf83dce8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasEnumConnectionsA

kernel32

GetFileSize
GetLastError
GetModuleFileNameA
GetStartupInfoA
ExitProcess
GetCommandLineA
CloseHandle
SetEndOfFile
WriteFile
SetFilePointer
GetTempPathA
GetProcessHeap
WideCharToMultiByte
GetThreadLocale
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetLocalTime
GetWindowsDirectoryA
GetCurrentProcess
TerminateProcess
lstrlenA
LoadLibraryA
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
CreateProcessA
GetSystemDefaultLCID
RtlUnwind

user32

CharNextA

advapi32

RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA

ole32

StringFromCLSID
CoCreateGuid

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ