42d7ea564aaae3959b1c58fa59605966_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42d7ea564aaae3959b1c58fa59605966_JaffaCakes118
Size

123KB
MD5

42d7ea564aaae3959b1c58fa59605966
SHA1

4bc08c2992c6fd47250534f1df30feffa602dfec
SHA256

47f14d3fd9d996d17a75cd1d58b1c23fd366136a44fe7f196a2d397e3ff7ee82
SHA512

95dd0e94dc1c42c1dc1d65e8aa6745395d023f830595372d86c9515b0b5dc17993c4f40e635ea1f16e7bed124884db0f188e10a8ab337c807da2cde1426be0d0
SSDEEP

3072:c9Tr+p62LZsB+ticBeo6d/rbkVWYaft1LZH4U7wWYKSLtC:IGp5PsaJ6dnbxft11Hl0WYKSg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42d7ea564aaae3959b1c58fa59605966_JaffaCakes118

Files

42d7ea564aaae3959b1c58fa59605966_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd4d62a4c5bbb103eb3ff880ebd7d018

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

FlatSB_EnableScrollBar
MakeDragList
ImageList_Create
ImageList_Merge
ShowHideMenuCtl
ImageList_GetIcon

gdi32

CreateHatchBrush
DeleteColorSpace
EndDoc
EnumFontsA

Sections

.text
Size: 69KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE