43b387818de80e9538edf831b000352d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43b387818de80e9538edf831b000352d_JaffaCakes118
Size

132KB
MD5

43b387818de80e9538edf831b000352d
SHA1

3cfb0329ffff201222ef8bd3f514310c6878f7a0
SHA256

e32933ad78246ebc5d3adf035a0ab751920da9f4d24601e48c80b5ebe4499383
SHA512

47d9944e6414bc77c9b6c926c9dc5835cf9945d3d450fbe24afb3929745270620b26e2db90aada65239851021b713a48ed77fbcfb966b6d27a1c6aa8a1c57209
SSDEEP

1536:0GVigmhbA/DkLjf7Oaod02r/K+AhkN+Z1dS5i55kMGYrm4/LBh2yEi9oLd:feRA/MTqTryLkN+Z1pWdYq+Bh1Eimp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43b387818de80e9538edf831b000352d_JaffaCakes118

Files

43b387818de80e9538edf831b000352d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2b2cb679e9a8cedeb6de97e9e82b539

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
GetModuleFileNameA
GetTempPathA
GetModuleHandleA
GetStartupInfoA

user32

PostQuitMessage
DefWindowProcA
ShowWindow
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassExA

urlmon

URLDownloadToFileA

msvcrt

_XcptFilter
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
srand
time
rand
fclose
sprintf
_adjust_fdiv
fopen
_exit
fwrite
exit
_acmdln
__getmainargs
_initterm
__setusermatherr

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ