43742373cf0b27a89c6413dc5f731e50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43742373cf0b27a89c6413dc5f731e50_JaffaCakes118
Size

3KB
MD5

43742373cf0b27a89c6413dc5f731e50
SHA1

35120def63b1e065a1f15a6b7a2fddb18dbfc996
SHA256

95f19684785f91d1187976a04d81a73b726b543c9b60ee8407a29406a77cce4b
SHA512

0d8f40651d235a8ec74976c556f3a8d15171bf0d11e4e6a498582101f8c90b48acb54e66d8836eaa80e1b3eefe3c28a955559fe7ca3d8d29eb55b45ccc2b9d35

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43742373cf0b27a89c6413dc5f731e50_JaffaCakes118

Files

43742373cf0b27a89c6413dc5f731e50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f08d2f77a1cbc4bab25f536becb27c31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA

kernel32

CreateProcessA
ExitProcess
GetModuleHandleA
RtlZeroMemory

urlmon

URLDownloadToFileA

comctl32

InitCommonControlsEx

Sections

.text
Size: 512B - Virtual size: 238B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ