41e057955f9d1636048bdb249608a670_JaffaCakes118 | Triage

Sharing

General

Target

41e057955f9d1636048bdb249608a670_JaffaCakes118
Size

19KB
MD5

41e057955f9d1636048bdb249608a670
SHA1

33dae621fe15e393a68c7ec00caf249cdbe0857a
SHA256

86f3bbb9f6979b06b94a7dbb38d4657673db7ed3296c05a5ef2f0fa841094cc9
SHA512

296ea65844df17467879162c6b3521b40906c13d7516fff7a60dd3c127b062f6ff87002bacb570478c315ec493321126cedaa03b1fe584931aca70f88e1f2b82
SSDEEP

384:iafCgz+e0HzT+1+Cvg2a+JQp3To48C6IboAbgwXW9L35h/0q/a2zUdmyZFSS2A/w:iIa3Hv+1z42a+JQp3TPboKgwuL35h/Bb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41e057955f9d1636048bdb249608a670_JaffaCakes118

Files

41e057955f9d1636048bdb249608a670_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b0c31dcbda12fb0b47d9581fc282ad39

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateRemoteThread
GetProcessId
SetConsoleCommandHistoryMode
GetVolumeNameForVolumeMountPointW
GetPrivateProfileStructA
GetFileSizeEx
GetDllDirectoryW
GetLongPathNameA
HeapSize
ScrollConsoleScreenBufferW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE