43b9ca6bc629be8556c22f423037cbf2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43b9ca6bc629be8556c22f423037cbf2_JaffaCakes118
Size

83KB
MD5

43b9ca6bc629be8556c22f423037cbf2
SHA1

de994af0540ac74cc7b1d4729c514c4ec19761ce
SHA256

aa454c649de862d50b7db82013cfc8ffcb307b0a15a81bac4da5a0e7ebe35a87
SHA512

cbca30c6cc3c3187e8e5f8cc587a2069287404b0c3778da75ffb3dfcb195c84ebee96f749a15a0b117c97a520eb3fa83e1fa657de299da4744bbdc4fc9c12b79
SSDEEP

1536:fViA3EJdCGKV+K/MaKwam7ihXhXnmvIbvMpE07LdDpFFQf4yugb7:tiA3EJd7q/M6tnILbsZjm4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43b9ca6bc629be8556c22f423037cbf2_JaffaCakes118

Files

43b9ca6bc629be8556c22f423037cbf2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e1625d8071406afdd29d60bedf6aaa09

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetDateFormatA
GetFileSize
OpenFile
lstrcmpiA
lstrcpynA
lstrlenA
ExitProcess

Sections

.sforce3
Size: 25KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ