41f597fa41984a0fbf70e6c780075dd2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41f597fa41984a0fbf70e6c780075dd2_JaffaCakes118
Size

25KB
MD5

41f597fa41984a0fbf70e6c780075dd2
SHA1

a4e772f333671fc1da34f77836c9ac20473526f9
SHA256

df70bd8b5386f74528f402c5f4ecb9b8ffdb8d765fc1e10bd3e890668945ba03
SHA512

26a272264687ceb9c13d02d5a5072bc9ef90858168584efdf70301b9c8fe5cb42de35f7464feb944ee8df86e5818cca9f75369e75f5899e16853ce2ca3780385
SSDEEP

768:uzGdm8xfUNDAkuDJmRSn5fqIQk7WJLNAnJ6IvS:HmYfUNFu1mRe5yIQk7SkxK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41f597fa41984a0fbf70e6c780075dd2_JaffaCakes118

Files

41f597fa41984a0fbf70e6c780075dd2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f4d0f95cfd603bb1f97e32bb4aaa4cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchangeAdd
SetComputerNameExW
FindFirstVolumeMountPointA
DeleteCriticalSection
LocalShrink
BaseCheckAppcompatCache
GetPrivateProfileStringA
LocalFileTimeToFileTime
ConvertDefaultLocale
GetLogicalDriveStringsA
lstrlenA
CreateJobObjectA
GetConsoleAliasExesA
UnregisterConsoleIME

user32

GetQueueStatus
DdeQueryNextServer
UnregisterMessagePumpHook
IntersectRect
SetClassLongA
DrawTextExW
ShowCursor
DefDlgProcA
CascadeChildWindows
CreateDesktopA

Sections

.text
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ