43e4e09a6c4cf29e9b959f9881a60680_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43e4e09a6c4cf29e9b959f9881a60680_JaffaCakes118
Size

149KB
MD5

43e4e09a6c4cf29e9b959f9881a60680
SHA1

830f0b87b39d0f210302d6ea5f61047174f865dc
SHA256

62f83cf1c3b56a27410521899806d61a0639b4130e24e00c29cfcd22161ed233
SHA512

7486154bf460758eb332a703e871c907b35b0f63e5059b67d7092cb4e4ea7faea4b6f46f3cb5baa1f37e1bb4536a48bf6133d3a75aba4ef3a8b286337dd41174
SSDEEP

3072:CktxS2KOfaIJzwfFtJRMjCuJsBrNO16L46nlRTBsn:Ck62KOfaOsIjdJB1O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43e4e09a6c4cf29e9b959f9881a60680_JaffaCakes118

Files

43e4e09a6c4cf29e9b959f9881a60680_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d770e26e367f7d327ea2a9e03cdfb42e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
GetProcAddress
GetSystemPowerStatus
VirtualAlloc
VirtualFree
HeapAlloc
CreateMutexW
FindFirstFileExW
HeapQueryTagW

Sections

.text
Size: 122KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_MEM_READ