43c1fe445fb79caf71656e46373f4682_JaffaCakes118 | Triage

Sharing

General

Target

43c1fe445fb79caf71656e46373f4682_JaffaCakes118
Size

296KB
MD5

43c1fe445fb79caf71656e46373f4682
SHA1

bf252b492a7f7969d09202b711a37b9413d7348e
SHA256

5b804569034f24244db1b13a609e6a5bb7af48baeb7f8baea0ff1634ff4553d2
SHA512

0c15bd132d1149cb2aacb17a706eb957ded3daadbaab3fe64f584d0bd66865b660f59d338716548e0b37bc03ee5100aac0c173d312cf36b323d93ac488d1f1af
SSDEEP

3072:S94PJeG+5XiZH0emYZAWkdJqxL8zymqc63Q77NrynXNaKuo1r1hpFnfjEXNEZ+zL:m0+5X2Hh3kdUQ7Jref4XdoRFU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43c1fe445fb79caf71656e46373f4682_JaffaCakes118

Files

43c1fe445fb79caf71656e46373f4682_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\abojasm\Documents\Visual Studio 11\Projects\WindowsApplication4\WindowsApplication4\obj\Debug\WindowsApplication4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ