43b47aaa4975571999ae12063e611977_JaffaCakes118 | Triage

Sharing

General

Target

43b47aaa4975571999ae12063e611977_JaffaCakes118
Size

80KB
MD5

43b47aaa4975571999ae12063e611977
SHA1

097ca2aac13e5a1b3a92c20b8a48efa0d1ff4b67
SHA256

5f8b0ae801423f07df0bc8037b49198fb3a246423d5d1072e873d0e59d9d49bd
SHA512

ab2a053b6157af1a589790867b1f2f52628080f41ce4bb4c177f88c19744b277d3dac13aab9a34e7d0dce76eee685dc474c2bcda82d9ff2f209c4f02721e2bdf
SSDEEP

1536:MCppZapNG4iPJZiCFjhKlLYbbpfY6j82hW8fPL:MCLZapI4gJQTdYb9R8vYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43b47aaa4975571999ae12063e611977_JaffaCakes118

Files

43b47aaa4975571999ae12063e611977_JaffaCakes118
.exe windows:4 windows x86 arch:x86

98252d1cd04f2d7c6a5de4ab62899ecc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
SetVolumeLabelA
GetCommandLineA
GetNamedPipeInfo
GetConsoleNlsMode
SetConsoleCursorInfo
UnhandledExceptionFilter
GetVolumeInformationW
GetStringTypeExW
lstrcat
SetNamedPipeHandleState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE