42436067beed45ae34cd3090dffb3678_JaffaCakes118 | Triage

Sharing

General

Target

42436067beed45ae34cd3090dffb3678_JaffaCakes118
Size

196KB
MD5

42436067beed45ae34cd3090dffb3678
SHA1

0afd3d291b0dd729c39a8d430547e89059c125b0
SHA256

e809722ae6330af8dc2e29de2edca5a0c2585b52458da554d915b412939c9192
SHA512

2e3927be203a927fb1682e921d17c2961b9374dc5f39afe897cdc4d93289ddaf98b96bd5c638cecc2fc782a39185b93ecabc8d53e9b6ca27bcc67e420a35dc51
SSDEEP

3072:rrnlYS8OsU65pDGyfFm+Uh1o24pFCKldtO/CZOruopMHndD6COAOy:/epObMp6SFmzLrKlsCSyHN6COAO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42436067beed45ae34cd3090dffb3678_JaffaCakes118

Files

42436067beed45ae34cd3090dffb3678_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a49ab45601575a2bf0826d39dc93c42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
IsBadHugeReadPtr
GetProcAddress
lstrlenA
VirtualAlloc
GetModuleHandleW
ExitProcess
GetCommandLineW
GetLastError
lstrlenW
ExitThread
GetACP
LoadLibraryExA
GetCommandLineA
GetModuleHandleA

Sections

.text
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ