d41ab412575efdbebd49d25930c0e856_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d41ab412575efdbebd49d25930c0e856_JaffaCakes118
Size

46KB
MD5

d41ab412575efdbebd49d25930c0e856
SHA1

73a23f70f4b98d2a2edd03d2a90f40cfe7fe8d09
SHA256

d0936842a3b2ffb10d3623bc8167f753aba2a1059849960bcc72a686ad204d4d
SHA512

3fe820f0c777286839552d6f0d3c6d00094c6ce1660713e0bf5102108f1e724f289386371dd376f7ba7ad218aec271419acacb91018f526d98068eb1558cbc97
SSDEEP

768:PF0nvGGlaCEHCn69Jrjn2YUW5Muzb2AGAYBf6WqkNz:mdlxEi8n95MbBoWjN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d41ab412575efdbebd49d25930c0e856_JaffaCakes118

Files

d41ab412575efdbebd49d25930c0e856_JaffaCakes118
.exe windows:1 windows x86 arch:x86

a0b49d5f2db25ff15e1a37fc87f3162b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
lstrcpynW
TerminateProcess
GetTimeFormatW

user32

MessageBoxW

Sections

.text
Size: 19KB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

fcpo
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE