43b91aaf66a97553dfaa5fb0774a519a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43b91aaf66a97553dfaa5fb0774a519a_JaffaCakes118
Size

376KB
MD5

43b91aaf66a97553dfaa5fb0774a519a
SHA1

0ea902046588d77b73020863356ed736c072cafa
SHA256

c801e05d502b8f3c46bb03919e611aa810a9b0b86de7708c868b095f37ce2212
SHA512

c38511bf9d723dfce91fd70b74268c337cc5cd74465aa7aa2fa4eae88b90fe6ff19885669a2c0a4379b904cd55dd5a18af5f6c25414e9e8dde6f636031cb7b75
SSDEEP

6144:Wbksd6DrhpacgTGAidEl3yNhtFUaOrj0lMGWx1Ae2hzn0vdNGmXzLAC3Lpk0dyyS:szdB3yNhtcj0lM5x1Ae2xnXmgC3L+4r+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43b91aaf66a97553dfaa5fb0774a519a_JaffaCakes118

Files

43b91aaf66a97553dfaa5fb0774a519a_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

WinFXDocObj.pdb

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.khe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE