43cf5a11e5c4913fa99482ec0130404e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43cf5a11e5c4913fa99482ec0130404e_JaffaCakes118
Size

896KB
MD5

43cf5a11e5c4913fa99482ec0130404e
SHA1

612b4aef8c8b866ad2a4640fdffe5a46911642b1
SHA256

ed8dd67b350103af52ed822b8eb13567b0346a5ab634256c73dfb02c00828f0a
SHA512

71a4c12d90ad840679f1d66d5cc1be0d164d77f78f3d5c239491131c78887018890927030a3d54d74e38632285ad5962508bd756b068262cf18e574751c0a330
SSDEEP

12288:SH1ZiTt6RvAc+REhuAHnvWytN+JXhXPOC9lc778zQQRgLc16w2ceRW:MHJZAc2+/0xzfmY6M2rRW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43cf5a11e5c4913fa99482ec0130404e_JaffaCakes118

Files

43cf5a11e5c4913fa99482ec0130404e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 645KB - Virtual size: 645KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ