43c44940ee8130b34fb08a1bf6f2915a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43c44940ee8130b34fb08a1bf6f2915a_JaffaCakes118
Size

597KB
MD5

43c44940ee8130b34fb08a1bf6f2915a
SHA1

721a767ee6cdcbbdf72971619b1aecf0ac00e922
SHA256

7ac831dec2ae61fd1d72cf5e0adb88115161f495d0eff8af140987ce2950b150
SHA512

9476f74c3a2c8c988cf79211cdea1e4b6e94673043e1cb81fb6a7cd45e0826386407e24a5b368b4d94c9490d1278e407690a9c32c06655aafe49ae600e8603ec
SSDEEP

12288:mittjyw9xuSWLL+RLX/Xrg+QiMBObVvPh9UHNk:9ttP9JRL/Xrg+ZMBuVvPh9UHq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43c44940ee8130b34fb08a1bf6f2915a_JaffaCakes118

Files

43c44940ee8130b34fb08a1bf6f2915a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Chunyung\Documents\Visual Studio 2005\Projects\Tool\SonyTestAPO\release\vncutil.pdb

Sections

.text
Size: 188KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mjg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE