41e311f4588421202e13b92e7a807840_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41e311f4588421202e13b92e7a807840_JaffaCakes118
Size

29KB
MD5

41e311f4588421202e13b92e7a807840
SHA1

3bb9aaa6b161d6e4193eb6788352c5ec34f85902
SHA256

bacd431ce3d3e9040a9b9109916774be85dad91177ee8b226855b45569e06df6
SHA512

f7fffe455fb10896c128a4811775ec0414581db16ee384caf8bedbdce07235c4891abc2d9fba6eb2c0aa2866c764194e144181c8b0d88e79e9d361c14b8d7e83
SSDEEP

768:jR6Fvg13Qzfyqn1NiuvryBLSOCUs/XVLh2J:jMymh1Nis2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41e311f4588421202e13b92e7a807840_JaffaCakes118

Files

41e311f4588421202e13b92e7a807840_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f20c06514a24cd155b7cdc2c2b59cdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetModuleHandleA
VirtualAlloc
LoadLibraryA
LoadModule
QueryDosDeviceA
HeapDestroy
GetProcAddress
GetStartupInfoA

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ