43e04cae93b412f5e3d5d3011d3eebfd_JaffaCakes118 | Triage

Sharing

General

Target

43e04cae93b412f5e3d5d3011d3eebfd_JaffaCakes118
Size

275KB
MD5

43e04cae93b412f5e3d5d3011d3eebfd
SHA1

5b1bc94aae32a66c491fc63a7550534188c7a6a1
SHA256

fb65f94e543a4612ad758190ce14680803bb8d58c3144c2837108e3b7c282218
SHA512

b74e2e492e76ca32da62e1277c8a3e7163c6fe8272da7ead7073bcb56be05080586e253fa8b121e5e39c289760f1bdcf0f9d2e121298e940200d202b28eb2e08
SSDEEP

6144:mcy8lIbffD/Om+Kt60zBP1ASCbJiFcWE5tntBB8OWNY2YbV:g8lIbffDDlt60tPTBKWMttv8LNBUV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43e04cae93b412f5e3d5d3011d3eebfd_JaffaCakes118

Files

43e04cae93b412f5e3d5d3011d3eebfd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 261KB - Virtual size: 780KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE