43f4f770170c4c85167dc186ae30f1c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43f4f770170c4c85167dc186ae30f1c9_JaffaCakes118
Size

282KB
MD5

43f4f770170c4c85167dc186ae30f1c9
SHA1

17b7b84ccd3495aee037bc67241f1ed36497025a
SHA256

519e05d226386dde5bc2b5b09081e59706376ab17b87b30977ab3f36e86e289d
SHA512

fb5a8961e3843c0446cbbe12fdec3afb04c7f1cef9970165ff277b0e4cd705a01f4b644cdeafa9399c3dfa1cb38551edf5e9f32cfe89816cf4a3d41f8d55c419
SSDEEP

6144:BVsWg60Uux9WinGqJ0IlJFC8qMaOdArlijXWDWcGT5jSuv:vLg6hu+ivJpC8kaArlGdcYBhv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43f4f770170c4c85167dc186ae30f1c9_JaffaCakes118

Files

43f4f770170c4c85167dc186ae30f1c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ad69b1584ffd9f72d87dc1de844edd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

EnumFontFamiliesExW
CreateICW

user32

MessageBoxA
DialogBoxParamA
EndDialog

kernel32

ExitProcess
GetCommandLineA
CreateThread
ExitThread

Sections

.text
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ