41f043f8b9bbcd87917e602e98942164_JaffaCakes118 | Triage

Sharing

General

Target

41f043f8b9bbcd87917e602e98942164_JaffaCakes118
Size

92KB
MD5

41f043f8b9bbcd87917e602e98942164
SHA1

9e3deacac3b2cada123ff91220f377ee97bc1204
SHA256

61a9c1b7d8b436b71d3c4dd9a71e35c49a5e682cbbeaf3caee22abc69035fdd3
SHA512

91797c4d4891d931a93f1ef4425b94cfbbb6513b52822950069c777a84cc41a0503a944e8dbc7eacddde8adb5219802a855a645961cd916052d64b7f663b919f
SSDEEP

1536:hT2+hGSGlxMNYo/lZ0IvOtLLJlWxhwSwWDFwjoM+5gdNefe6LB5GvOUmSWJzw99G:hTVnbNZ0I25VlW7TF+Btue6LB54rmSWZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41f043f8b9bbcd87917e602e98942164_JaffaCakes118

Files

41f043f8b9bbcd87917e602e98942164_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39742718a2a9240d74f4c642e04ceace

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyIcon
DestroyCursor
DefDlgProcA
CreateDialogParamA
CreateDesktopW
CharToOemA
CharNextA
CharLowerA

kernel32

GetStartupInfoA
lstrlenA
lstrcpyA
lstrcmpiA
lstrcmpA
VirtualFree
VirtualAlloc
TlsSetValue
SleepEx
CloseHandle
EnumResourceLanguagesA
EnumResourceTypesA
ExitThread
FindResourceA
FlushFileBuffers
FreeResource
GetFileSize
GetLocalTime
LeaveCriticalSection
LoadLibraryA
LoadResource
MapViewOfFile
OpenFileMappingA
RaiseException
ReadFile
SetLastError

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE