42674eee8e031c4ebdc31a49e6029235_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42674eee8e031c4ebdc31a49e6029235_JaffaCakes118
Size

104KB
MD5

42674eee8e031c4ebdc31a49e6029235
SHA1

0377cb597f2ea916479e83d061fcc77b7aa9e897
SHA256

dbf31382a39818b84e7018f5bc28a918bbab1facd27be90509f1fa79881188d0
SHA512

3cce10eb799e145c8caf04ef3088d83091fdddfd4573e2a08a1d26b27a903156c193f79fb68eb92ec7ea476089e6c8413e3fb6b071640e9bca7bcd47acee6f74
SSDEEP

1536:AP2O0s0Z6ec7A+W8dbntjRGpRtKsDFE/Hhm3uzzfhzd8SS6pat4:Q2DjLc7RPdLtjRUtpDS/4kpzdP8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42674eee8e031c4ebdc31a49e6029235_JaffaCakes118

Files

42674eee8e031c4ebdc31a49e6029235_JaffaCakes118
.exe windows:4 windows x86 arch:x86

74349adff7fdf9dc6803b118019a5cee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
UnlockFileEx
LocalSize
GlobalLock
CreateTapePartition
GetProcessHeap
AreFileApisANSI
SetFileApisToANSI
ExitProcess
GetStartupInfoA

Sections

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack329
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE