41ed2ee04d9e904d8cabd0df894cd166_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41ed2ee04d9e904d8cabd0df894cd166_JaffaCakes118
Size

4KB
MD5

41ed2ee04d9e904d8cabd0df894cd166
SHA1

e0508461471ba6839f178db8b782fb87202d1b30
SHA256

dc62c68cf49d0a31bf9451bc4a8b5b683718a0a7646312e4c0c997b932f99143
SHA512

a6f4f07e2dd051616a586782db32f2af9ea0218d6eb21a75ad79c88bc25fbe797a6a56970b24270cf89b3e73914bf18a1c8ab6cd195825ceaa97fc4353ed583c
SSDEEP

48:iKsuu3WIP1da9eBt8nrQLwKYhA3QhdoBMhJYMM:RIP109eEcEKYhAcq2h69

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41ed2ee04d9e904d8cabd0df894cd166_JaffaCakes118

Files

41ed2ee04d9e904d8cabd0df894cd166_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3591804c80aca65a3ce64d3abe64cf49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
WriteFile
SetFilePointer
CloseHandle
CreateFileA
ExitProcess
GetModuleHandleA
GetProcAddress
ReadFile

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ