41f118c4ffbc72ec34ee5e9dae217c17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41f118c4ffbc72ec34ee5e9dae217c17_JaffaCakes118
Size

363KB
MD5

41f118c4ffbc72ec34ee5e9dae217c17
SHA1

70670e973454887cf393f817ed54db58e360f78b
SHA256

c11d07313d6525c64ab05328cc0edd532f141ba3e6d2f52397f9d5a320e8f313
SHA512

102844498e25b3fed5f0b095c32aa979636e173f0bdb2e737a3cc2a97cc119e167a05f2d29eb9020d163edd8b9f93578ad9c8c7c55140b3201aa3f1d9b262236
SSDEEP

6144:OiJwnMGOr8fe0AJgjchjTnDqNkCYV7zj9nd56t6L8R8NmC:5+n9O8e0Fcx/bV7Pn5k+XNH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41f118c4ffbc72ec34ee5e9dae217c17_JaffaCakes118

Files

41f118c4ffbc72ec34ee5e9dae217c17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa6c23d0719cb1da1eb32d7e2ff9ef72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetDiskFreeSpaceExW
GetCommandLineA
CloseHandle
GetComputerNameA
DeleteCriticalSection
EnumResourceTypesA
GetModuleHandleA
FreeConsole
LoadLibraryExW
SetLastError
GetLastError
VirtualProtect
CreateMutexA
FindClose
GetExitCodeProcess
GetDriveTypeA
ReleaseMutex
Sleep
TlsGetValue

shell32

SHGetDiskFreeSpaceA
DllUnregisterServer
DragFinish
StrChrA
SHFree
DragAcceptFiles
DuplicateIcon
SHGetSettings
ExtractIconA
DragQueryFileA
SHGetMalloc
ShellMessageBoxA
ShellAboutA

printui

vQueueCreate
PnPInterface
bPrinterSetup
vPrinterPropPages
bFolderGetPrinter

user32

MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ