43404a504ce0f476626ce98f1ad8a189_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43404a504ce0f476626ce98f1ad8a189_JaffaCakes118
Size

81KB
MD5

43404a504ce0f476626ce98f1ad8a189
SHA1

16b29393cab4b643dd0c111f384e0dd05c960a31
SHA256

13eb6fa75add734d50896ea9da2dcdae7af28ace54a13c3499889e9a8916953c
SHA512

bf1e17371e31d3a62bcd730d5322c72e2e60ebc527ebdf09e6454a1749e0897a7fee006cc2c301f172c37fd6a3edff1a3a2822f1202840f8a3460c5ff1fe7da8
SSDEEP

1536:dFE+0IBrIsLmb9KZY/XEIu4/UiCTzoNQslsZqGDUMgus:vEzIBr9LWXsk4vDUvus

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43404a504ce0f476626ce98f1ad8a189_JaffaCakes118

Files

43404a504ce0f476626ce98f1ad8a189_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ