43e3faa77237f08012424014a1014fcd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43e3faa77237f08012424014a1014fcd_JaffaCakes118
Size

152KB
MD5

43e3faa77237f08012424014a1014fcd
SHA1

3b0b983a65ce20d2a72780038796c9fce1d6998e
SHA256

e7f0bb361ed273e2eee49d1e3729ecd7c01356f04e3b35561af4513909c38933
SHA512

0628403c99e73f5ed79148c18caac90575d7b3e2069c980802d5ecde09adb51cc9c6efe41cb27e60fd4ceb2528954f04df48bc6f902f6a26bdc4586c061ba524
SSDEEP

3072:EhL9pu9V4CCLttfgWDilJi2H46ux+ocevPz95rVdRTKtbt:s8cttYWWe2Hru+zeHN7Gtbt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43e3faa77237f08012424014a1014fcd_JaffaCakes118

Files

43e3faa77237f08012424014a1014fcd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a084dc5b6f1cf958bc179bcf0ed3942

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CreateFileA
GetProcAddress
GetModuleHandleA
GetLastError
LocalAlloc
GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
GetStartupInfoA

user32

MessageBoxA

msvcrt

_adjust_fdiv
??2@YAPAXI@Z
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE