42c0ff0abc3ee8227c1e8523ac094c1f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42c0ff0abc3ee8227c1e8523ac094c1f_JaffaCakes118
Size

2.9MB
MD5

42c0ff0abc3ee8227c1e8523ac094c1f
SHA1

8b14dab42d9d6f7fc8787f43c53b7c421cdc3921
SHA256

b61fc70f453ca329f65bde68e0e0722435783de0d613bfa0537400cf5590aaf5
SHA512

d4085f2aa613a46cf9aec289436795d49073cce9fd597107b19605d2d10b5c423a7152ff3b3b4306980453fe42d79f0cc40a536c515020f76250590895840f97
SSDEEP

49152:nVz9ab8xGdKgZ7vqvTYVzek7MBjRqXaFk+OkkwcK7Mh77fDoHCmLl1JRxU7w00Jh:Vz8mGdKgFCvTiyUsMaFk+Pko7Mh3fDov

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42c0ff0abc3ee8227c1e8523ac094c1f_JaffaCakes118

Files

42c0ff0abc3ee8227c1e8523ac094c1f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7cd42b69b224bc689d18a1beeccf966f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32 rasapi32

GetMessagePos �SH

Sections

.text
Size: 1.4MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ