43936d2c54f69b300e33d0b97143eae9_JaffaCakes118 | Triage

Sharing

General

Target

43936d2c54f69b300e33d0b97143eae9_JaffaCakes118
Size

464KB
MD5

43936d2c54f69b300e33d0b97143eae9
SHA1

c00c89731061463ae09fda77372a1f45e33c4d92
SHA256

09b38fa968b81d88adb26785878e7db9e363bfe8c40222eb29444e87cbdb3e5a
SHA512

036d9f18584edd6807d75341412acbaafc92b0b1e0409d9e6b53e857644d36deaf4cf8eaff4161386ca2b74b5b4c7b36fa708ecc43914bb9bc6dc984897a9812
SSDEEP

12288:+0Ps1xthKdR6Ho7G+DmdCqhK1vDuQkMTa:v8T2R6Y9DUMGMTa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43936d2c54f69b300e33d0b97143eae9_JaffaCakes118

Files

43936d2c54f69b300e33d0b97143eae9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85ae73aed3a6d9ae3491c949a70348d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
calloc
exit
memcpy
_itoa
??2@YAPAXI@Z
_strdup
??3@YAXPAX@Z
free
__p__commode

kernel32

GetTempPathA
GetModuleHandleA
GetModuleFileNameA
CreateFileA
SetFilePointer
CloseHandle
GetTempFileNameA
FreeLibrary
DeleteFileA
WriteFile
ReadFile
LoadLibraryA
GetProcAddress
GetStartupInfoA

user32

MessageBoxA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ