41267bcc588ea828aadc0ecb89c61ac2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41267bcc588ea828aadc0ecb89c61ac2_JaffaCakes118
Size

306KB
MD5

41267bcc588ea828aadc0ecb89c61ac2
SHA1

2d9311fac6d8f8717a1160da2e31f77e18f52e5d
SHA256

b8115e2f9d3eade49fe4f24fa0ccfaa98862d73a1a607c55e151215099aa8425
SHA512

cb6a58aee0da0459179e9ff0490ed12c3c7b157243d8a792bdc2f765b06fe49be0c854eab93db535228154106be0ccd6c734ba7069e631e2c3ee4815a23aedec
SSDEEP

6144:vrqEZ1aVJbY8T22V4R2X3V0D4iwoquTSs0GHYkSzQuw96ru4P8T2l:vrqc12FbxvuD4iwxI5Aznw96rZ8Tw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41267bcc588ea828aadc0ecb89c61ac2_JaffaCakes118

Files

41267bcc588ea828aadc0ecb89c61ac2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a764d8cb67d368465a19cd9e03de72df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
GetFileAttributesW
GetConsoleTitleA
GetDiskFreeSpaceW
GetCurrentDirectoryA
GetEnvironmentVariableA
ReleaseSemaphore
lstrcmpW
WaitForMultipleObjects
OpenMutexW
CloseHandle
GetPrivateProfileSectionW
GetVolumePathNameA
GetExitCodeThread
CreateDirectoryW
GetModuleHandleA
GetModuleHandleW
GetFullPathNameA
CloseHandle
CreateEventW
HeapCreate
GetFullPathNameA
CloseHandle

certmgr

DllRegisterServer
DllGetClassObject
DllUnregisterServer
DllCanUnloadNow

Sections

.text
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.pack
Size: 297KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE