41dad2063b43bbf09d7c1b3f2e982c09_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41dad2063b43bbf09d7c1b3f2e982c09_JaffaCakes118
Size

1012KB
MD5

41dad2063b43bbf09d7c1b3f2e982c09
SHA1

b7aee51ca6979582b99d4dbb20a3a79749a1a303
SHA256

3caa926b5f5b95b020b348cab9447f69b6a31c349abc7bdb0a6307353975a967
SHA512

7809501dc54a6370556e3d080263a04362fea5b088eafc8f5dd293be67b7298e7f9ede3135a732d1f00390cc2e7ab1597af0f9f24906b27055bbf26134b3b414
SSDEEP

24576:76MJFFEL6elDB2CE7IHUcj5L03LUirQN0nRPgcEe:PJFFEL6UDb6IHUclULY0dTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41dad2063b43bbf09d7c1b3f2e982c09_JaffaCakes118

Files

41dad2063b43bbf09d7c1b3f2e982c09_JaffaCakes118
.exe windows:4 windows x86 arch:x86

21a752b0f2b8dcfa475f4993e9e4b74f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Server\By\Through\Without\Accesses\The.pdb

Imports

kernel32

lstrcpyA
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
GetProcAddress
GetConsoleOutputCP
GetModuleHandleW
GetFileAttributesW
SetConsoleCtrlHandler
FreeLibrary
GetCurrentDirectoryW
GetLastError
LocalAlloc
LocalFree
GetStdHandle
GetFileType
WriteConsoleW
CreateFileW
SetFilePointer
WriteFile
CloseHandle

user32

LoadStringW
CharPrevA

msvcrt

printf

shlwapi

PathCanonicalizeW
PathIsDirectoryW
PathIsRootW

setupapi

SetupDiGetDeviceInterfaceDetailW

Sections

.text
Size: 360KB - Virtual size: 358KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 316KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ