43b04553bab43f902a8d67b87909095e_JaffaCakes118 | Triage

Sharing

General

Target

43b04553bab43f902a8d67b87909095e_JaffaCakes118
Size

16KB
MD5

43b04553bab43f902a8d67b87909095e
SHA1

1334009ae8c7f060c93971c246fdd807fa175d12
SHA256

f64542272c91dad5ef8bab73d467aaf45705a2392def1d62a3beec7c88669982
SHA512

187eb3b45a1bc2ed9d9c47fdd33c76b7eab257c146f093b7c94cc0f9705eb180355faa144b87237eb3834c22a81a3b6ecef4edbddee891bf19f87c0f8c191543
SSDEEP

192:DXYqpfqyTI+dm/kZCrsJGhgM9icuqQicjd4TD7QBQhQd7i:DnpfqyTxm/lrsJEgMlQjO7QciG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43b04553bab43f902a8d67b87909095e_JaffaCakes118

Files

43b04553bab43f902a8d67b87909095e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

06ac5006571f45f4fe48af3b0111b8bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetProcAddress
LoadLibraryA
LoadResource
Sleep
VirtualAlloc
VirtualFree

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ