43c7f4735556dcdf16a3552650235668_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43c7f4735556dcdf16a3552650235668_JaffaCakes118
Size

37KB
MD5

43c7f4735556dcdf16a3552650235668
SHA1

ac12790aa1e5edf38c58bff85ea22303ad29e53e
SHA256

8f857fcc7860b2bae8ca6570c387e07f8d70ea16bc832e00a916d0826de9f6c0
SHA512

2967b501f3e358409bbc4551006b5eb3881d4bb9dbbf6a976855ba8ea208d609ad136dcc6cbe085199ef7fd19d464fd5d72ce441e34adf314ba040aceb36256d
SSDEEP

768:NJNJPmME350n+N2tGs7YFjA3CcWiQnEt5ehrvhBM+4B:NJNsl0EjssFhcqEtkhr9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43c7f4735556dcdf16a3552650235668_JaffaCakes118

Files

43c7f4735556dcdf16a3552650235668_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9184367f8d1f9986888f0eed2e6f8bf4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetModuleFileNameA
GetModuleFileNameW
GetProcAddress
LoadLibraryA
GetModuleHandleA
ReadFile
WriteFile
CloseHandle
CreateThread
CreatePipe
ExitProcess
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE