43d535fea88d6aa9b112cfa49093076e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43d535fea88d6aa9b112cfa49093076e_JaffaCakes118
Size

37KB
MD5

43d535fea88d6aa9b112cfa49093076e
SHA1

73e3efcf57752c0c7ff8dbe0fc3ab4141f00a2a7
SHA256

1ca06a9053d84c23f12edb539a89fd188ed82d92840a2b3e5bf6d405e644210b
SHA512

26bdf7bc0398903fe5c41ad3a6b0ad01177df9209f80fa875d81c78527aadd5fac240e41f1498675a70005863cffe012b518a030cb1982316ed798fad4be04b0
SSDEEP

768:edIZ/alwuAknNWuCMQpb0ruFm1YqTrmHwbLyMyO:edILlknNU4rOobbLynO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43d535fea88d6aa9b112cfa49093076e_JaffaCakes118

Files

43d535fea88d6aa9b112cfa49093076e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

23f6e4ee8da20bb24cb1f94800599914

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

user32

FlashWindow
SetTimer
wsprintfA
MessageBoxA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ