42212ec6a74f511524b51018d7a8ec14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42212ec6a74f511524b51018d7a8ec14_JaffaCakes118
Size

77KB
MD5

42212ec6a74f511524b51018d7a8ec14
SHA1

442e59da1442b0e9d8ada75699e0a29ee7d0ca11
SHA256

b335b0d3eb04ccfcc82abc2e39af3042d683e76dba86b2bc3183d2e994d56ce7
SHA512

de1822f1c207bca83787d17b5b1a9b60dcfee986824a07178421416d7f5d7fbeb8c682e6f198f4f2ee35588153c008d4edb529828d4eabe59af33733a9a13a46
SSDEEP

1536:p9gSY/NC55b72g4bmbZSfOhJugoApSUF4zt3wBs07gtes20mRuYWolfmmmmmmoKX:PgSE8Big8vfOXIApf4Z3CgteluYWopmy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42212ec6a74f511524b51018d7a8ec14_JaffaCakes118

Files

42212ec6a74f511524b51018d7a8ec14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0fbb594cd87601cd1a19e2328843c65e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
OpenFile
VirtualProtect

shell32

ShellAboutA
StrRChrIW
SHGetMalloc

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ