43ac4eb0489567bf185543eedefe9cbd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43ac4eb0489567bf185543eedefe9cbd_JaffaCakes118
Size

35KB
MD5

43ac4eb0489567bf185543eedefe9cbd
SHA1

fb79a43482a51354feeba35e1d327162b8833221
SHA256

e8500adcb94360496a4dfa91f0610480d6a3b77b1becb5f892fa80ab447587de
SHA512

7fd0e3580963fccc973336872cb27c6ae3717dd8c5a57636c36a844f52ec4a744918cfe5469efaf078c1f40de56af822b6dab279ccf2a02e9a1e78f697da4a91
SSDEEP

384:DKWotj92iPtHdXkkJ92ZVkHlJuYzWgLJnxQE62WhfWXi3qx4iH5qWkkkonOqRmMC:DKjj9DfHl3aQXCuXi3AL5du8chHq69

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43ac4eb0489567bf185543eedefe9cbd_JaffaCakes118

Files

43ac4eb0489567bf185543eedefe9cbd_JaffaCakes118
.exe windows:1 windows x86 arch:x86

5b052913ad57def32d5cd816cef2f96f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateProcessA
ExitProcess
GetFileSize
GetModuleFileNameA
GetProcAddress
GetTempPathA
LoadLibraryA
ReadFile
SetFilePointer
VirtualAlloc

Sections

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE