41e53aa1f652225968dc5929fe74f292_JaffaCakes118 | Triage

Sharing

General

Target

41e53aa1f652225968dc5929fe74f292_JaffaCakes118
Size

111KB
MD5

41e53aa1f652225968dc5929fe74f292
SHA1

994a2245c0d14761c52ffcfab55bc762cb0cca97
SHA256

4819a5677f4031698007d4b4e11e51dba97791704bf9eac0f8bd028a9f6bed04
SHA512

2ced83584b693b22880d20e41b6c671aeb216877623eb587ad1155dc34d3c199abd48b9b7edabc9f2cebe5a7686ef6a0c2703855177b3e1823833f451d03ad77
SSDEEP

3072:VKiTiLZ9iKxMF4FrDeKKOxgSxtqtNNeiKnY91enfOJ:MDLPiKZhKOxgcqt+iKn+WU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41e53aa1f652225968dc5929fe74f292_JaffaCakes118

Files

41e53aa1f652225968dc5929fe74f292_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97c1770361601ced061f0fcd8b2d5982

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

StretchBlt
SetICMMode
SetRelAbs
ResetDCW
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrRStrIW
SHAppBarMessage

kernel32

ExitProcess
TerminateProcess

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE