41b3753af02930923a1492ab1ff1fd05_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41b3753af02930923a1492ab1ff1fd05_JaffaCakes118
Size

245KB
MD5

41b3753af02930923a1492ab1ff1fd05
SHA1

0d8939ba27a922b92af883da6f69955ca6ac4b83
SHA256

09c20f9c52f60ea2317192c3ab994334a42087a7d8f89451b35c4c5ae6b04fe6
SHA512

ca514ec992429f136726486f38f2cff4571ba505aa6f734e2eccae7571f7f338ac4bcc0343e8f4ab555252d2842c865600035bc37741c673b257094349db2786
SSDEEP

6144:Ywjq5zcJK00TqkpkpECaT1OPacf55wp1l4X4J/moxQ3eDGrU7GuBBX:9jqJcofrup16QXBMlHQ3egy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41b3753af02930923a1492ab1ff1fd05_JaffaCakes118

Files

41b3753af02930923a1492ab1ff1fd05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72a4a27c24eeca224f259d8e992875aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
GetModuleHandleA
GetTickCount
FreeLibrary
GetCommandLineA
lstrlenA
GetStartupInfoA
CloseHandle
GetFileSize
lstrcpyA
CreateEventA
GlobalFree
LocalAlloc
GetStdHandle
GetVersionExA
GlobalAlloc

user32

ShowWindow
GetMessageA
DestroyWindow
DefWindowProcA
GetFocus
GetWindowRect
EndPaint
LoadIconA
DialogBoxParamA
GetClientRect
EndDialog
TranslateMessage
BeginPaint
MessageBoxA
SetWindowTextA
ScreenToClient
SetFocus
PostQuitMessage
DispatchMessageA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 233KB - Virtual size: 827KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ