42e1606f4ebb8fdbe40278330aafc168_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42e1606f4ebb8fdbe40278330aafc168_JaffaCakes118
Size

152KB
MD5

42e1606f4ebb8fdbe40278330aafc168
SHA1

6d2d1d4e89452774f375d4c299f929caadf81d81
SHA256

07222c3fc3e9cda8647d1730b9a250e56aaae2aa9f659108bac720eb92d90465
SHA512

e72c4d9becba0e23cfc8838ba7bf9be35b4bd588e9eb429dc31c92a39eb5f6eadc282d80ed54a257675b3c7cc6ba1eaed1abbf9bc09debf25a0250de601022a8
SSDEEP

3072:SmpE6yYncJkS5Z3N0Kdd31y3+UioAWlk31Zr9sp53DB/XAM:PnWkSf+Kddu+UiTWW31ZryB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42e1606f4ebb8fdbe40278330aafc168_JaffaCakes118

Files

42e1606f4ebb8fdbe40278330aafc168_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba6fac64feba82b6448485ec2bdb9183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetStartupInfoA

shlwapi

PathGetDriveNumberA

msi

ord204

msvcrt

_XcptFilter
_cexit
exit
_acmdln
_exit
_initterm
_c_exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit
_except_handler3
__setusermatherr
__getmainargs

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 846B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ