42fe245a90dec2b76e23b94cf17a5efb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42fe245a90dec2b76e23b94cf17a5efb_JaffaCakes118
Size

107KB
MD5

42fe245a90dec2b76e23b94cf17a5efb
SHA1

d9697b1d6dcb1748a7f319a84cdbf3e16fca3896
SHA256

d784b9e97d6c15237fec25b14957f697f337d5936c3a00a9c80dad581d6d5399
SHA512

cefe10d1486c28d515e40ce9d0db7a61accd88dd432178318c9efdfee6ea05bdceef4585c6d76c361c692786eb06eb50e46dc335b646a0b999acf2beaad05359
SSDEEP

3072:2CMTBEEIghlAPjXg5Y0TNPHbH6YyIf8yX:2J9EEIu0cC0TNWwf8yX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42fe245a90dec2b76e23b94cf17a5efb_JaffaCakes118

Files

42fe245a90dec2b76e23b94cf17a5efb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e54e99b02c38bff0879cfd75a5276944

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
Sleep
GetCommandLineA
ResumeThread
VirtualLock
CloseHandle
UnmapViewOfFile
GetProcAddress
GetModuleHandleA
GetTempPathA
VirtualAlloc

user32

wsprintfA

advapi32

CryptAcquireContextA

ole32

CoUninitialize

msvfw32

DrawDibTime

crypt32

CertCloseStore

winmm

midiInClose

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 188KB - Virtual size: 555KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ