42d4cd46c78d388ee45d9abdd3ad6fba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42d4cd46c78d388ee45d9abdd3ad6fba_JaffaCakes118
Size

13KB
MD5

42d4cd46c78d388ee45d9abdd3ad6fba
SHA1

c430c38992589f4512af53020bb5fa4f9766ed7a
SHA256

11afd1d4d19569f815e66e20e43a3cdb765b3e9b8713b7283d3400842dd629e8
SHA512

81627ef5bd809cec4b68f5d97ea32466d639ed2774da97322965802c73ae4c9d0b98bb815a2fd954e40575f81b1e746ee69ca581ec3c7db7bc7ae8aa67e678b6
SSDEEP

192:UG888888888888A2G+igHDrgoZ3To1NslhGIcR3/K62JoE8HR3/t+K+yUoQaQoqX:G2G+iKvgAIsfBaK9oE8Zt+NyUoQaQos

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42d4cd46c78d388ee45d9abdd3ad6fba_JaffaCakes118

Files

42d4cd46c78d388ee45d9abdd3ad6fba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d6e8dc75cbe61956b89a5f946ae0eae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
lstrlenA
CloseHandle
lstrcpyA
TerminateProcess
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualAllocEx
GetThreadContext
CreateProcessA
lstrcmpiA
CreateRemoteThread
WaitForSingleObject
GetProcAddress
GetModuleHandleA
GetExitCodeThread
VirtualProtect
VirtualAlloc
VirtualFree
GetExitCodeProcess
OpenProcess
LockResource
LoadResource
FindResourceA

Sections

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ