43914daea1888bc01023d884dd789090_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43914daea1888bc01023d884dd789090_JaffaCakes118
Size

124KB
MD5

43914daea1888bc01023d884dd789090
SHA1

24a0c9d9d53f4d9fe72518ce1647e28f837166fd
SHA256

f7b9493e251024297d785a45525b6772425d0308b6506d5194d1fe0c1f8218ef
SHA512

429176e3eb1235b572c805786eb7c15b702ec14e06d77a38fb4df4f6472f192c8cf3b1994d4fc6020f35d472b885091042371e8d9035006d21e4a0e9f1e59f46
SSDEEP

3072:fUmLycKTiyINwNvqwQoHgKU1yOBzhyp+NmJcyK:cmaTiyINwNXQsOB8p+Ic

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43914daea1888bc01023d884dd789090_JaffaCakes118

Files

43914daea1888bc01023d884dd789090_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8a493dd19646737cbf4b6a02fd7b65f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
TlsGetValue
OpenMutexA
GetConsoleInputWaitHandle
RemoveDirectoryA
InitializeCriticalSectionAndSpinCount
GetLargestConsoleWindowSize
ReadFileScatter
GlobalUnlock
SetCalendarInfoA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ