43ac97548dad41b352aa439432b51302_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43ac97548dad41b352aa439432b51302_JaffaCakes118
Size

859KB
MD5

43ac97548dad41b352aa439432b51302
SHA1

6c556e47165ff822c51c7666ba10cb2e60d4a551
SHA256

79d377a6787bcf1ecc1abdba5c9a9868f87e0e308ef2f8eec04b52b5413bc813
SHA512

4b215be133c33daeec3a1786b556227b9a35cb316afa67e20528b75a75c2eb47e58af2589e9dfbf944fcb46478156b23f3247526a4b26bfee229ed7bb50622d1
SSDEEP

12288:UxdT9iwmnApItR8XXJw4b7FjNDFKmt/1tbk7ZWUlsPrDdqpMmAEq5AK+sQINclvQ:xAOsO0FjNDFrt/1tbYkrxqpoEiAvK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43ac97548dad41b352aa439432b51302_JaffaCakes118

Files

43ac97548dad41b352aa439432b51302_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.textbss
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 835KB - Virtual size: 836KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TLS
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ