43ce9e6a29ce1d9c6d44be3c3cee8154_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43ce9e6a29ce1d9c6d44be3c3cee8154_JaffaCakes118
Size

83KB
MD5

43ce9e6a29ce1d9c6d44be3c3cee8154
SHA1

b6b96e11bb986f744a395ae2109421329c3ff4bd
SHA256

2312d7dda79410baecbcf6a40bb2d697e0473863fa0f1665fe9f02aca5db8735
SHA512

0ecc9aaf8f940ceb1ee3fe7e038073164527051eaee8cddf6f3d8ca2c5e8ec79801062e3d4d26d0a4151b02eff7cb1e80ebb28e617c25f803b755d771f5fc846
SSDEEP

1536:29YH91asPwlyGSWx39SslDL6L0GiwXWfOA+51TscNtg1tvUBNz3ArwwLA/Mub:2aHfasP+gWx3ckX/OYarskg1RUBNlMc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43ce9e6a29ce1d9c6d44be3c3cee8154_JaffaCakes118

Files

43ce9e6a29ce1d9c6d44be3c3cee8154_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d107b47a6994fe2d14e9e2821296c08c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
UnmapViewOfFile
WriteFile
lstrcatA
lstrlenA
ExitProcess

Sections

.sforce3
Size: 25KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ