41b917afd107a637a94a1d057142e88b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41b917afd107a637a94a1d057142e88b_JaffaCakes118
Size

141KB
MD5

41b917afd107a637a94a1d057142e88b
SHA1

0d742eaf07629b9eefad28775aed0cdbc5e83b5b
SHA256

818fde9a00ed41b2509171910e0c1b7b798a6b72678c0392ddbddc2003d6e865
SHA512

a23bf943e9fe9949ab5003926f1d0d028b9ccb7aef9803e71e07975ef9645fe595ed35e08381c7a5692a5930ce0c86a6eb51f5d6e4391ac5c8d271514e31ba1e
SSDEEP

3072:0AgDJAWLk8X6y9gXl+Eo4cuYJG5PA0TtWmZ56RvuzC:0vQe6O626A0TImH651

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41b917afd107a637a94a1d057142e88b_JaffaCakes118

Files

41b917afd107a637a94a1d057142e88b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e774eca8b0ccfc36085cb7090be4801

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GetStdHandle
GetLastError
GetCPInfo
GetACP
CloseHandle
GlobalLock
CreateEventA
LocalFree
FreeEnvironmentStringsA
GlobalUnlock
CreateFileA
GetDriveTypeA
FindClose
IsBadReadPtr
HeapCreate
lstrlenA
MapViewOfFile
GetModuleHandleA
LoadLibraryExA

user32

GetMessageA
SetFocus
EndDialog
DialogBoxParamA
IsMenu
CheckMenuItem
CreateWindowExA
ClipCursor
GetDlgItemTextA
RedrawWindow
GetDlgItem
GetSubMenu
GetParent
DrawIconEx

apphelp

SdbFindFirstTag
SdbCloseDatabase
ApphelpShowDialog
ApphelpCheckIME
ApphelpCheckRunApp

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ