43fd6c34dc3b68f9d28a0416cdb05d05_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43fd6c34dc3b68f9d28a0416cdb05d05_JaffaCakes118
Size

1.7MB
MD5

43fd6c34dc3b68f9d28a0416cdb05d05
SHA1

ea143e08a45c5e4a8f9d00f6eca3f18694f373e5
SHA256

06b67a88e7f2529a54b4c5c806ddd514b7169655fc0a24fabb3e4ae87ee0d956
SHA512

e6e06c7196c70645d267b668a436a8c4923b19034d4fcf2933f1d495014f9f7f8480953640811fccb1855261c70fcb9580134c5693f2aba2e0e8ac14859d31da
SSDEEP

6144:oEXAImM5BfXoLSs2G9w/iG4kYZOT/ZSC2ONNa94XK:Flm2VI2G9waG4bZQhSVONA4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43fd6c34dc3b68f9d28a0416cdb05d05_JaffaCakes118

Files

43fd6c34dc3b68f9d28a0416cdb05d05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ