43597f9f23d479e388e058476d6cee29_JaffaCakes118 | Triage

Sharing

General

Target

43597f9f23d479e388e058476d6cee29_JaffaCakes118
Size

273KB
MD5

43597f9f23d479e388e058476d6cee29
SHA1

91e551ed48e17ebf13a334a68051b536eef0abfd
SHA256

1f1216238cebe44d9785edfc42c36ac24005f68ca97dc99155697a003864c01a
SHA512

ee3baf8a431b44fcfc5c7dbe93d6680cb20e166e4831f664f00e6d693798ffdd84e46ad4a8a1534972d4722474e9cfe4ea548766c29b406027b0943125691aa9
SSDEEP

6144:bUcn/IWxCkKUZHkzvrjxKSKX8pbH8jR/n1wOXARpX:Hn/IWx+zvBqX8p78F/WAADX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43597f9f23d479e388e058476d6cee29_JaffaCakes118

Files

43597f9f23d479e388e058476d6cee29_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ab2fc2448dd74e21b2ff948f50b27198

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
FindResourceA
GetModuleHandleA
GetPrivateProfileStringA
LoadLibraryA
ReadFile
SetCurrentDirectoryA
lstrcmpiA

Sections

.sforce3
Size: 25KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 242KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ