43ff1201883c65cdefd1b781150b3f1e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43ff1201883c65cdefd1b781150b3f1e_JaffaCakes118
Size

361KB
MD5

43ff1201883c65cdefd1b781150b3f1e
SHA1

7fe9974df793f8993be6f6d854dedfc7d031d8eb
SHA256

4bf66817e12b838919520586203712879dd88c0b9d8a4eeac2fef63cd9ba72f6
SHA512

9e694b5c9ac792dc7d7c887872a23c6bca1efac1e238e350f23250f933223554aabd1a3c33402bb32dadffaddbcbc565349603c0d2ffb1aab1956fad17dd0963
SSDEEP

6144:/j9e+K+GBP0jgAOgLzb0ge6E8Hz0Qa1+ZJUOaJtYRW/8W5hyIl:L9e0GBcL0g9Pz0Q9SzJtLphye

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43ff1201883c65cdefd1b781150b3f1e_JaffaCakes118

Files

43ff1201883c65cdefd1b781150b3f1e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 305KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ