43701f4b3ea7cc06db88f36e35676da6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43701f4b3ea7cc06db88f36e35676da6_JaffaCakes118
Size

356KB
MD5

43701f4b3ea7cc06db88f36e35676da6
SHA1

dc0a42ae4cd3dd8c4409c9d75e3705c6a7de1222
SHA256

82422fe5c8f3835e5cc8b5bedfc2989bb799629cf279fdac7963373b0ce92a72
SHA512

66057279316c793443980df0383249dbcce7127502c0bf7f166f70ba187d51381a31731d06949be73433d53afc0d6225f0bb4b9df0f517410f5767cdbb22e6f6
SSDEEP

6144:gL9m8qT+UaxFiZPplC7omHnbNUrzoPgmIdSGHUpmQxKEq6HR9Z:gLY8qT+/xF0rzw9o70gHE7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43701f4b3ea7cc06db88f36e35676da6_JaffaCakes118

Files

43701f4b3ea7cc06db88f36e35676da6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 328KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ