41b77832c6ea42ad3f80c5400ed4b77d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41b77832c6ea42ad3f80c5400ed4b77d_JaffaCakes118
Size

35KB
MD5

41b77832c6ea42ad3f80c5400ed4b77d
SHA1

ab8281a9553e128174d7fd66df16087942798631
SHA256

1b01a57db22d63aae550f1113f14ddcce3a40f0bd5ca45cf563c5e7f642d9344
SHA512

e732478d1c5bd5e5a139c413e5cda34a795e8d62b7ade1e001b3fcc301640124b5276effd1eb4a446a166ddef8d5d0d09e368cdfb9d67b28d1a0a680b02b4e37
SSDEEP

768:wkS5ZdzFdP1XZ9eCRF8UAGXWagpT+IpJKZa:qZNFdPVZ7RFmlVpkZa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41b77832c6ea42ad3f80c5400ed4b77d_JaffaCakes118

Files

41b77832c6ea42ad3f80c5400ed4b77d_JaffaCakes118
.dll windows:5 windows x86 arch:x86

cc99e05b7190a016eb4e7dbb3f398a80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
EnterCriticalSection
ExitProcess
FindResourceA
FreeResource
GetACP
GetCommandLineA
GetDateFormatA
GetLastError
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemTime
HeapAlloc
InitializeCriticalSection
MapViewOfFile
MultiByteToWideChar
OpenFile
SetEndOfFile
SetLastError
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree

msvcrt

__getmainargs
__p__commode
__set_app_type
_cexit
exit
rand
setlocale
sscanf
vswprintf

ole32

CoCreateGuid
CoCreateInstance
CoInitialize
CoInitializeSecurity
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
StringFromGUID2

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ