d42639a375046eb89d37ab41b21dad90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d42639a375046eb89d37ab41b21dad90_JaffaCakes118
Size

48KB
MD5

d42639a375046eb89d37ab41b21dad90
SHA1

159c6cfbcf049b31dc6e0764e35c5c65ea798e02
SHA256

42e167c366818027999165fb7beb4e3aaae4e1cd6f17ee9fe7908de0f6c0bb70
SHA512

f4f79582a237a5ead08617205d0c24b7a7bc9538a4e9f5f2ba3b0caa1f7346507d9f405bc2ca3d7e76221f9d9ca310bf483c07d1cef655ad0eb2bcd1039ca1f4
SSDEEP

768:GIkqfG9X+bAnsfwqf8MpC6v7ZNm7Akdby3wF/gUGSxEOF:LfGt2fwqf8G7vIdm3KuS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d42639a375046eb89d37ab41b21dad90_JaffaCakes118

Files

d42639a375046eb89d37ab41b21dad90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

04fb1a68d0d401ab7e41c36d2f1b291e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
QueryPerformanceCounter
HeapAlloc
GetPriorityClass
ConvertDefaultLocale
SetMailslotInfo
GetModuleHandleA
GetStartupInfoA

user32

GetQueueStatus
LoadBitmapA

msvcrt

__p__commode
_exit
_XcptFilter
exit
_acmdln
_initterm
__setusermatherr
_adjust_fdiv
__getmainargs
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE