44c43ad38ba1a403c557e6583809dfde_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44c43ad38ba1a403c557e6583809dfde_JaffaCakes118
Size

137KB
MD5

44c43ad38ba1a403c557e6583809dfde
SHA1

29a32bae4ab69257aa5ec01930aaf4fdb0fde5b6
SHA256

6be0133ab4e4ece79ade8a9e260d28ad3dbb9a8f4c3bc1f9c3c92b6e1cc8bd5d
SHA512

8569bcf273fef9334f9d9cfb5d0e361f00e4166b40c667d4e5436192b82cf35c392c3f0ac87719d2e0274674ad6c7a5953ec5f997c15bec89c63189f6cd4999e
SSDEEP

3072:wsBDXDQLTe7+Q+xNgch6Hzo1b5sc9WIMdVq+jiror6qyJMI:7DXDQeSlxNgSK8biiW1v/X8MI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44c43ad38ba1a403c557e6583809dfde_JaffaCakes118

Files

44c43ad38ba1a403c557e6583809dfde_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 400B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE