42d0d429f3a70d7611b55afabd7ac4c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42d0d429f3a70d7611b55afabd7ac4c2_JaffaCakes118
Size

31KB
MD5

42d0d429f3a70d7611b55afabd7ac4c2
SHA1

640a3954cb04dc827ea1f3c75912bec9fa1f011d
SHA256

0228bdf0d02bb51860e0d067e2b7eb317120ff2ea8fb70f1e1de9285ecaa33e1
SHA512

a47cf85d04280d5ebba7644b64c98905613ac4287890ad42f1285edc65a6f5e5b6989f1172e1e5bc7142d503c578301d47774ae740d2db0f9ab730145728c5e6
SSDEEP

384:1EhAtzml/cSiKbRzUk35P9c3YXuxGMrUe/sqTU2L/nFua7zGxYhM9GykzCgkezQJ:BVmlUiKkD+YXu8ML/BTl/NGxYqGyrI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42d0d429f3a70d7611b55afabd7ac4c2_JaffaCakes118

Files

42d0d429f3a70d7611b55afabd7ac4c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ee11c6d79eaee85b0616a0c6c7d97d4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
OpenFileMappingW
ReadConsoleInputExA
lstrlenA
ProcessIdToSessionId
GetConsoleCharType
WriteProcessMemory
SetComputerNameW
EnumDateFormatsW
WritePrivateProfileSectionW
WriteConsoleOutputCharacterA
AllocateUserPhysicalPages
ConnectNamedPipe
GetFileAttributesA
UnlockFile
GetProcessTimes
GetUserDefaultUILanguage
EnumSystemLanguageGroupsW
GetStartupInfoW
WritePrivateProfileStructA
FatalExit
SetComputerNameW
EnumTimeFormatsA
GetDiskFreeSpaceW
MapUserPhysicalPagesScatter
GetVolumePathNameW
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ