43a3eac3ab01d08485a7d6b0d1d0c097_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43a3eac3ab01d08485a7d6b0d1d0c097_JaffaCakes118
Size

16KB
MD5

43a3eac3ab01d08485a7d6b0d1d0c097
SHA1

cec33c300ffebe01c31ea16806258059de9f33ef
SHA256

5a52e741bc92050f5990d57bb8f67c243aefbce6f160cf01a96c5837776f6118
SHA512

19752c0ba13d3bbd5a720fe2ff38cab4eb76f71e106c743c83e88e1c4829c5bd77603dfe7574bb49e82e509744949d7df6e01bba42fb2113360b7d5ff0e79369
SSDEEP

384:If8AFdFm2jtzT8c56KGcMexDTHfz9wwf5:If8AFdFm25zT8ijMwDT/zuw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43a3eac3ab01d08485a7d6b0d1d0c097_JaffaCakes118

Files

43a3eac3ab01d08485a7d6b0d1d0c097_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a985a3151d929d030c6a964798fd8c97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CreateFileA
SetFilePointer
GetFileSize
GetProcessHeap
HeapAlloc
ReadFile
CloseHandle
GetProcAddress
VirtualQuery
VirtualProtect
HeapFree
LoadLibraryA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
HeapCreate
HeapDestroy
HeapReAlloc
HeapSize
HeapValidate
ExitProcess
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
VirtualAlloc

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE