a43aaf16b8ed1cb8cc556852d8365975_JaffaCakes118 | Triage

Sharing

General

Target

a43aaf16b8ed1cb8cc556852d8365975_JaffaCakes118
Size

76KB
MD5

a43aaf16b8ed1cb8cc556852d8365975
SHA1

cb777d56cb774fa5e3a1f6af0e99bfc3c40e8190
SHA256

9920fd4fbfeed87a1cf1eeed1794cbe147999bb2720a0957276ae3452490c8aa
SHA512

e1a277d7e56c963529a25dbecf8bde8e5d34a2343bc78d842bccbd221eea6cb76767b086c736653a20b3bbdbe9bc7b6a13a9a89ca228dd47e5e2e39c3dea287a
SSDEEP

1536:iibNxmlI7lBZUNlqkj12oLc/bxqnoYxiFou98Z54QaNUqePj:xpxqAaNYkj12acjwoLd9o54DNUqE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a43aaf16b8ed1cb8cc556852d8365975_JaffaCakes118

Files

a43aaf16b8ed1cb8cc556852d8365975_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9417346c574c18c54fa3cae7dbfa7512

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadStringPtrA
SetCurrentDirectoryW
CreateFileA
GetProfileIntW

user32

GetClassLongA
ChangeMenuW

gdi32

GetTextFaceA

Sections

.data?
Size: 70KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARE
Size: 1024B - Virtual size: 810B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 313B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ