43d0788ac5a088a40e6c414d27ddb08b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43d0788ac5a088a40e6c414d27ddb08b_JaffaCakes118
Size

138KB
MD5

43d0788ac5a088a40e6c414d27ddb08b
SHA1

55a28db3e3befc61395aa776c9d5785c9169a44d
SHA256

b664e5f4502daf9b1b18717d11d8c0fb532b7879d18ef3fd9ca48103b8304157
SHA512

b0d17b09086a95868b664bd78fed2fa8d3ec2c22288cc7a4eee9cb0f8d31aeb33faf3d3042f55857b8c471402e8090babb9ca1a77c12427c2cf68a748547a218
SSDEEP

3072:bRdp63GwXgXgXgXg9Axixixixi1q9/m12CUqldHkJed5xLsJo3ghu:t63GwXgXgXgXg9Axixixixi1qdyHkoMu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43d0788ac5a088a40e6c414d27ddb08b_JaffaCakes118

Files

43d0788ac5a088a40e6c414d27ddb08b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4e1e39e5f19657aa251896a9286aafb9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

MessageBoxA

gdi32

GetDeviceCaps

advapi32

CryptCreateHash

shell32

SHGetFolderPathA

ole32

CreateStreamOnHGlobal

oleaut32

SafeArrayCreateVector

shlwapi

StrRChrA

wsock32

WSAStartup

Sections

.text
Size: 133KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE