42d63fc0bdb00e1f0f2b9ebf6e4e50a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42d63fc0bdb00e1f0f2b9ebf6e4e50a4_JaffaCakes118
Size

56KB
MD5

42d63fc0bdb00e1f0f2b9ebf6e4e50a4
SHA1

1876978c38b70806c3bfdc117a971e6c4f4ba3a3
SHA256

e91234d4694df24c2183d2d29513d7a209baebbba08e71d06469545c107777e1
SHA512

764a5dc41d7eb91beeb9256d389cfb14fe4de879b5211d10e6fdc225c32484a533b8a807fc6368822a37ee212979d34ec0e58ccaee5802f956a99bf4259d6c72
SSDEEP

1536:Ju8QfJax8Ax8xfRhNL2UtiqqQgocizU9GXwGhUKq3dGeR:w7ax8A+5vRptilkoGFUKidjR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42d63fc0bdb00e1f0f2b9ebf6e4e50a4_JaffaCakes118

Files

42d63fc0bdb00e1f0f2b9ebf6e4e50a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd600e4ad28bb31cd2e72f789035066e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSizeEx
FreeEnvironmentStringsA
GetStartupInfoA
LockFile
GetEnvironmentStringsW
ExtendVirtualBuffer
WriteTapemark
EnumResourceLanguagesW
ReadConsoleOutputCharacterA
GetHandleInformation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE