40b735ff1b6602352e9eb6a042858b7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40b735ff1b6602352e9eb6a042858b7c_JaffaCakes118
Size

3.7MB
MD5

40b735ff1b6602352e9eb6a042858b7c
SHA1

93a5520ff5855cabcb951c521664ceb0659e6c63
SHA256

c9aa8722c50a0cfde57057460bd7ff41ba206bd821f7fae38aac0ec088e7d85f
SHA512

d5749f07087706c1614ee769cca569e5454d63822ebaaa2141deddc8ab6c93d700360155f48819d4bda37aac93d2172785ec465b4cf84de0e6acb5fd60def158
SSDEEP

49152:tRDDOYaBEUtbKEnHE4mWJ+Wl2KxeaJmPBPMYVC:3DOYaBEUtWUktWwsxvSC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40b735ff1b6602352e9eb6a042858b7c_JaffaCakes118

Files

40b735ff1b6602352e9eb6a042858b7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da35383e98c39076d18b4e984c897ab2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetLocalTime
GetACP
GetProcAddress
FlushFileBuffers
GetVersionExA
CloseHandle
VirtualFree
SetLastError
SetFilePointer
MapViewOfFile
GetModuleFileNameA
RaiseException
TerminateProcess
GetCurrentProcess
DeleteCriticalSection
GetExitCodeProcess
GlobalUnlock

Sections

.text
Size: 740KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 394KB - Virtual size: 393KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ