40acffa3de1b751bf4acdeaab3853dec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40acffa3de1b751bf4acdeaab3853dec_JaffaCakes118
Size

1.3MB
MD5

40acffa3de1b751bf4acdeaab3853dec
SHA1

ab29f92abf48e684135b06d12e93f0cc3ef56d46
SHA256

2dc0f518872a8ebbe85b436bd8597b0b3f60dd8fe94ed14535cb9af11dde2607
SHA512

d5a9115b5b3e36aeef6d8d3963ff29c0de6b1333f28c41f1b12558270dd2deae631b64a9ff80fc210d5f918dc26feaaf58a3ea3a6c9fd4d185a07f26a9f87b46
SSDEEP

24576:SQDPVLLiBbB0zMRTW+wsDaQw6DDz3qRyPnmGfrnvVUKueY8RmneWtJ/kIL1F:1DPVVMpasY6DwOBfrnvV7UeWtVRF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40acffa3de1b751bf4acdeaab3853dec_JaffaCakes118

Files

40acffa3de1b751bf4acdeaab3853dec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11da5cca76dce3b726c8bc1a82bb88ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

advapi32

RegOpenKeyExA

comctl32

InitCommonControls

shell32

ShellAboutA

mscoree

_CorExeMain

Sections

.tls
Size: - Virtual size: 544KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE