43c95f600a0ac5ca082b80bf1d6f97e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43c95f600a0ac5ca082b80bf1d6f97e8_JaffaCakes118
Size

128KB
MD5

43c95f600a0ac5ca082b80bf1d6f97e8
SHA1

051e80ffd2d1968705d4fee22ea5e1ef6b70e981
SHA256

2b353ab89409d2b9e24662306af57fc75eb833350e57eafa0355d33a4ef6a511
SHA512

888fabdf781b1697522d3fb329819a85e3c0a207f18268336ecb37c63ce194057ac03c4e62d1da5bd26db48ec0046ff24262f9cf8b9e8734b26f08b968f6ed19
SSDEEP

1536:BtW5x8g/nHceNLDlSjU8dwbDWxrnP/EWgOlAaRa2rOb6EFwGeillye0nnA7Q2T1F:7WDHPHceNJcNdyb9Ksf+g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43c95f600a0ac5ca082b80bf1d6f97e8_JaffaCakes118

Files

43c95f600a0ac5ca082b80bf1d6f97e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ