43ca2674611f1beb2c6862ba90ed3a65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43ca2674611f1beb2c6862ba90ed3a65_JaffaCakes118
Size

161KB
MD5

43ca2674611f1beb2c6862ba90ed3a65
SHA1

c32e1d71c0f1d9be25b3d631ac6ff219476c3192
SHA256

c02ef2471480860d0967469dbcb03bc6bd222e50d14319b6949a95fd3b4b4cd0
SHA512

1bdcbdbbbb24fae9d1098cc2699522664443f45b6fd90d9b77f2d3792b34a54b774c2082849e90e10ccde804376187b428f731f38e66160d3dcb06d4db50cae0
SSDEEP

3072:TE1PNVq96T0ZipGBCitKsFJyVIvig9lp9phExIHGRvjznlQSV2k+f53IIhIIWA:CPNVqhipliMsv5pe5t+R3IIhIIW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43ca2674611f1beb2c6862ba90ed3a65_JaffaCakes118

Files

43ca2674611f1beb2c6862ba90ed3a65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\packar\Bureau\Obfuscated\Setup.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ