41494f28b416e992557c471274ef96e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41494f28b416e992557c471274ef96e9_JaffaCakes118
Size

86KB
MD5

41494f28b416e992557c471274ef96e9
SHA1

7e1bf9a838817acfedfcf8e83765da06a8b4d645
SHA256

8634ddf79d092e29df8308dec38cf9ef55e16528eccd05135920ed9562d32872
SHA512

e8d25ea22103a914b864469950f79c424631618dd7ef311accb407753dafe7329ab89c021eb3197e91cecf9a9b28fe6dabf9f4a2752ed2c1dd4904d5f422650f
SSDEEP

1536:zOWGUFb4FtZ2PLwJT7wZp2U/GulYKD/VH6UEjIy8Nf1BnJNP7dcf7T61s5Varlj:qWG0b4n4LwJ36hT/oD8Nf1Njdw7T2cV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41494f28b416e992557c471274ef96e9_JaffaCakes118

Files

41494f28b416e992557c471274ef96e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

59cc43b4804e557bcca8b71069884cc5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceLanguagesA
GetPrivateProfileStringW
OutputDebugStringW
CreateTimerQueue
GetTimeFormatA
OpenWaitableTimerA
GetPrivateProfileStructA
GetProcessId
GetExitCodeThread
VirtualFree
GetConsoleCursorMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE