41a2b3c421a4835fe154ea5bca57e0eb_JaffaCakes118 | Triage

Sharing

General

Target

41a2b3c421a4835fe154ea5bca57e0eb_JaffaCakes118
Size

155KB
MD5

41a2b3c421a4835fe154ea5bca57e0eb
SHA1

1390f000b50f9997205fda92a5351a3e7e1b30ec
SHA256

ffeb862eb55b2f273714c59940423daa65f68405bae22408a87b9d17e40fac7d
SHA512

e2e84d882876a6e04107f8de80885cb3e11265ee7a7892876d6bb7e31f7c7e459c6293e73494e4836d6b6eaeb1ef20f3ad51632e04c52dc5c4d5f5834664ab4b
SSDEEP

3072:zci7hWFX5ArnCXmZui4UZSqAnedhUj0Y/VXtQlNeZMw/Toz1i:p7hWTArnUg2KKnxlRKPeZMwI1i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41a2b3c421a4835fe154ea5bca57e0eb_JaffaCakes118

Files

41a2b3c421a4835fe154ea5bca57e0eb_JaffaCakes118
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

3a17f18970bfc117bb4421ce7182b148

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

GetModuleHandleA
WriteConsoleA
LocalUnlock
GetProcessTimes
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ