43d584a1b86a1873964e69b31e990111_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43d584a1b86a1873964e69b31e990111_JaffaCakes118
Size

9KB
MD5

43d584a1b86a1873964e69b31e990111
SHA1

c5999f98a1c9b0463bf74b895f0b219137584f81
SHA256

eab2dc398b5a5e24e75e34a10a78c96192e9c5da0025098a79151092dff0025d
SHA512

d3e46888fe215ab364f37d0ea4cc0b88bf0109bc4f36ddb9877a6820eed348d66c59b7f686d04469fdda5203b620ac4549ece427199e209e12f76b1dbaa0f1b7
SSDEEP

192:q1m1y0wpPmzYI2kGuVpCcuFU6bdWZUGfvr:JwpOzYoGsMcNUGXr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43d584a1b86a1873964e69b31e990111_JaffaCakes118

Files

43d584a1b86a1873964e69b31e990111_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ec8bc4aa0b1f3a6342187376454b9d19

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ExitProcess

user32

AnyPopup
CheckMenuItem
CheckMenuRadioItem
CloseWindow
CopyRect
CreateIcon
DragDetect
DrawEdge
EndPaint

msvcrt

?unexpected@@YAXXZ
_Gettnames
__dllonexit
__unDName
??_U@YAPAXI@Z
_CItanh
__doserrno
__p__osver
_adj_fdiv_m32i

gdi32

Arc
CreateColorSpaceA
DeleteDC
CreateDIBPatternBrush
CreateFontA
CreatePen
Ellipse
Escape
GdiGetDC

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE