43cbfe40585f7b3580ab8a724fcfdbe5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43cbfe40585f7b3580ab8a724fcfdbe5_JaffaCakes118
Size

915KB
MD5

43cbfe40585f7b3580ab8a724fcfdbe5
SHA1

674190b21e44f2a688e41b41171f86c41cbc2832
SHA256

418bc9f45b9ca2bcb86a21c1819deb7d0d1ececc42f56f6e5dc1545527cb2d5f
SHA512

858dcc5e889f44a16851beccfcb15042ad55fb603db3e8306ee6ba1cd5b0d248932286861292fab445395ae9ca60dc52e11d710b40b09058e1490e809a02c439
SSDEEP

24576:Arsdtz2GPFcWNfj/Q548bm58HNm2lIjsbEKLpkNQdurB:AIdtz2KcWxYicmqHJlLHpaIurB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43cbfe40585f7b3580ab8a724fcfdbe5_JaffaCakes118

Files

43cbfe40585f7b3580ab8a724fcfdbe5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 403KB - Virtual size: 403KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ