42abf96e15e971965cc4e4c88e6f7042_JaffaCakes118 | Triage

Sharing

General

Target

42abf96e15e971965cc4e4c88e6f7042_JaffaCakes118
Size

22KB
MD5

42abf96e15e971965cc4e4c88e6f7042
SHA1

92058ef5d6a050e1b798164d1dd434470daf57ed
SHA256

ab4c8cdca249b938ef93eef4781ff6192ab43693db44dec9ebc1f67a2c94c425
SHA512

dd42d42e64f1195b9a601badec39496fa4868ea3299ae2cf7db7698c8ed259dac860b8cce637800fbf187b3ca7e8b7fbba4e07e0cc1323af32d16a3d2896ee90
SSDEEP

384:XWiqsUAFyf/1Ypcii8DGWmFa8kCcpG5fpdYltymM2lMnoFS:XxgHipciiANmb1cpG5f4ltrM2lMnoFS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42abf96e15e971965cc4e4c88e6f7042_JaffaCakes118

Files

42abf96e15e971965cc4e4c88e6f7042_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f70c9e4dacfdd08eb4a4ce58abe86a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
WinExec
GetModuleFileNameA
GetEnvironmentVariableA
CloseHandle
GetVersionExA
FreeLibrary
GetLastError
OutputDebugStringA
GetProcAddress
LoadLibraryA
GetComputerNameA
GetProcessHeap
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

wininet

InternetCloseHandle
InternetOpenA

user32

wvsprintfA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE