41fdc971a283eed527236a2c540bc3db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41fdc971a283eed527236a2c540bc3db_JaffaCakes118
Size

168KB
MD5

41fdc971a283eed527236a2c540bc3db
SHA1

470f717c682d678750d44f90cc1c6178d60e03d4
SHA256

a2c3d542b489621d0b321c41c17d4cfe1085106ad0a7d7fe8c5808414b4b68fc
SHA512

8866a73059f9d6140eea20ce4c1575aad610959f2b5446930d5bf70cdbe1eba64cd9f0a78f7dc593870432ecd983e376c980745c155f968491ab8e26ed34fe67
SSDEEP

3072:DYoFqorhy/GHNJVqGUerTEsqYaf/8T51PJ40R4LRIDmF+5+CI7KNyI:1qCs/GWerT48d9cLRICA5lI7KQI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41fdc971a283eed527236a2c540bc3db_JaffaCakes118

Files

41fdc971a283eed527236a2c540bc3db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

530a3b5664cde568cdb96323b6eb989e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
VirtualFree
lstrcatA
lstrlenA
VirtualAlloc
CreateThread
LoadLibraryA
GetLastError
HeapCreate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
GetProcAddress
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ