43b962c87f402220fb103e5d49e517c2_JaffaCakes118 | Triage

Sharing

General

Target

43b962c87f402220fb103e5d49e517c2_JaffaCakes118
Size

558KB
MD5

43b962c87f402220fb103e5d49e517c2
SHA1

e94de883c57da0072dcddb6b10d79c6e39623b6e
SHA256

14f1c1dd38cc993b8a3ccc3aa32b3c25aa77c9591fdad7daac0f0f66042c0b79
SHA512

9b149f9223f72ab682a19de016bab177b81daf5605159732e8084d65c49d8c8ce41ba930feb3f16797123ccc72c4171e1a19612abd2d55f82a64de7e3a0d2380
SSDEEP

12288:QEcW9pJB83092UonW8jRos7Co2vQpBgCn8yXTPg2xqkF/dK3F:QPWPQ3091ofjIDvKeCRjP7xqsK1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43b962c87f402220fb103e5d49e517c2_JaffaCakes118

Files

43b962c87f402220fb103e5d49e517c2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 596KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.mjg
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE