43a189d02033b7a37411035c155d6753_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43a189d02033b7a37411035c155d6753_JaffaCakes118
Size

273KB
MD5

43a189d02033b7a37411035c155d6753
SHA1

5c6955b8366335ac86277987ab4f099d3da38277
SHA256

f216b6094ee06aa1a3de8d74beaa03fd6545626d0543d3e5975e84fba84b6aa1
SHA512

bc9e4ccee8bf07f856faf31e23e5dc6e4370f9e552dadc6b8ca07c69a18237d225787022bd40a163f2ce3a164b063362ae4b8c0aaac1aba2c3d47309ed2457c1
SSDEEP

6144:oBg59xvfyqvl/R++OgUsTNsSFos0rkpvb:oKjxvf/vl/R+oTN96rk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43a189d02033b7a37411035c155d6753_JaffaCakes118

Files

43a189d02033b7a37411035c155d6753_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 411KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 196KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ