41a1e82b371d8f7bcfa1a5526804f725_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41a1e82b371d8f7bcfa1a5526804f725_JaffaCakes118
Size

102KB
MD5

41a1e82b371d8f7bcfa1a5526804f725
SHA1

6ba702c1fe71c2abb25f3ebd6ac14b3329e0360c
SHA256

64067d497a2346bb8826653c3b3dd7155b8831b6e7ccf9c3b3f858da219fe3be
SHA512

d2336daaf968601e188f7b60b9f532435a1f5aae4f5201cccae93009a1c224fb01c42c2e2f24083a0c300cfd82f0d27154158db6de2260013ba8881e6e375e09
SSDEEP

1536:4218ZCXS70yjSqEsVyEJ3l3bBxAiLO2ZkLVTQ0uc1cRCYOCS5503Gis:diq4jSqb8qVL185ORCYfSb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41a1e82b371d8f7bcfa1a5526804f725_JaffaCakes118

Files

41a1e82b371d8f7bcfa1a5526804f725_JaffaCakes118
.dll windows:4 windows x86 arch:x86

bdfd862cdc594b1f76a3bb6783df0e75

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
EnumResourceNamesA
ExitProcess
FreeResource
GetCommandLineA
GetFileSize
GetLastError
LeaveCriticalSection
RaiseException
TlsGetValue

Sections

.sforce3
Size: 24KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ