43f9d79f497a30db26a128606ccff18a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43f9d79f497a30db26a128606ccff18a_JaffaCakes118
Size

594KB
MD5

43f9d79f497a30db26a128606ccff18a
SHA1

d2febe2d34c315df27a76dc1ba97aff6c2a1d28c
SHA256

ea9632aec12a066e5601d7d46d38b3a02bb545c3babf18bc99765fd10015ed92
SHA512

9f7af60271c85e11a3714e5dbf5c68937a5d75749d0082560789f4f1cfd842b1ce6e00b57e7e2eac6de10f19fd05c166950c2c254ed8b9f71ab913d90f471440
SSDEEP

12288:Sp1ETtBYDb18RUWVPS1uAj2c2kV3fDTauExZUiliS/Ku1:SpwYDbd8PS16bkpDTa7liEKu1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43f9d79f497a30db26a128606ccff18a_JaffaCakes118

Files

43f9d79f497a30db26a128606ccff18a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 593KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE