03943a64210171627f6440b5519591c8_JaffaCakes118 | Triage

Sharing

General

Target

03943a64210171627f6440b5519591c8_JaffaCakes118
Size

325KB
MD5

03943a64210171627f6440b5519591c8
SHA1

e3479e7dcb8fcb3e2d244b04dc20def140667166
SHA256

ab70addec5caf24bc8898f51227a4012dd3ac61604bae6184392f6d3b1ef6f34
SHA512

9c8b6f8d91dcd71afaacc823f8982b4a2abfe7874664ef7192e5d96bfe8f86aaae2056463809551c4d9ddc10d0e7eba734db524fe37d37a6e39ab0ee1ac85237
SSDEEP

6144:N5H25yd+04kMPPs7J5bFd72j/i4bFcF0A+DzMY8s43Xfx:z25yde4lRFhSbaFwZGnp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03943a64210171627f6440b5519591c8_JaffaCakes118

Files

03943a64210171627f6440b5519591c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ