JaffaCakes118_40cc7f1ac53d3b835227a0676c36cc87 | Triage

Sharing

General

Target

JaffaCakes118_40cc7f1ac53d3b835227a0676c36cc87
Size

721KB
MD5

40cc7f1ac53d3b835227a0676c36cc87
SHA1

eb257ed1fc860f63df76ac5d43fc62b93dd09cbe
SHA256

e1d6755c9349ae52f82cc0118752649fa01f0e2d3ede0062b282e0311dc58017
SHA512

46ee9b163f31904f809807eb8664fffa079f2a5b470cdd9c8c7ce5ac3a4e972d209a1f2bab10a489920448258917bd14d5218bd0a470dceb629dc1dd1e2a34f3
SSDEEP

12288:kjh8ZBPJaG77Wiq0oGUk6ss5XPn5jfJIAc93nJC0PmPD6sZYPaads2PfhNN8PPM7:BPUG2LHG8VZJbeg0+r6gYiOPPf983

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_40cc7f1ac53d3b835227a0676c36cc87

Files

JaffaCakes118_40cc7f1ac53d3b835227a0676c36cc87
.exe windows:4 windows x86 arch:x86

7995fd2d6faee712340c1304d5d4a199

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
LoadResource
HeapAlloc
AllocateUserPhysicalPages
GetLastError
LocalAlloc
GetModuleFileNameA
GetModuleHandleA
DeleteFileA
SwitchToThread
lstrcmpA
LoadLibraryA
ExitProcess

user32

SetCursor

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 677KB - Virtual size: 677KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.66aqy24
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE