243b49650da9ea50a70265fcf81ffbc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

243b49650da9ea50a70265fcf81ffbc5_JaffaCakes118
Size

119KB
MD5

243b49650da9ea50a70265fcf81ffbc5
SHA1

ed6cc11c2c607dbc8fc976a8df5ca8e2e808f684
SHA256

71c46eb12e5f74f36dd5d1f71945795c323fb4dafd1124746936525695617d46
SHA512

f5c4d28023c802e60dd375519f4cfbc6a17b48d18a03d6c42c554af6dc310308b05eb2c93f472bb685e2d4f48fbb1ec7d909a9c57d961c0de3f89b434ca3b37c
SSDEEP

3072:c/qe4i2Y4DNuiykb/KYk3V5e40gF+rUkb1fwCS:c/gY4wiLb/Vk3e40iMzRO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
243b49650da9ea50a70265fcf81ffbc5_JaffaCakes118

Files

243b49650da9ea50a70265fcf81ffbc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

34519c17125eeaad48ebc80cb33f87db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Heap32ListNext
OpenFile
FindResourceExA
WritePrivateProfileStringW
GetEnvironmentStringsA
GetProcessId
GetWriteWatch
VirtualFree
MoveFileW
EnumSystemCodePagesA
RegisterConsoleIME
Beep

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE