43a486269edab01756939fc5dd13cfb9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43a486269edab01756939fc5dd13cfb9_JaffaCakes118
Size

42KB
MD5

43a486269edab01756939fc5dd13cfb9
SHA1

e858c4d16b2049d881ccc5eca1955dc94a1cff39
SHA256

5ec456c4b0142b378f79d9f7487ce7aba4b8db434b1f8993fd90576d681ac34e
SHA512

3fa7be23b00395b0348788aa878227ce8b950a3c85e676de82036d36e2f59f3d40b804926297b78e097c50bea2dd59515e1a3545a8db45031028735f690784f5
SSDEEP

768:cm6cRY0xnN6s/IfenEXVO00AoSkSezc/ZdXa1RP4DcqT/zZt5Mwe3y:cm6aY0x9/IbXV4AXxe4/ZdX0P4AC7/5t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43a486269edab01756939fc5dd13cfb9_JaffaCakes118

Files

43a486269edab01756939fc5dd13cfb9_JaffaCakes118
.exe windows:8 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ptr
Size: 1024B - Virtual size: 767B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ecmp
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.warz
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ptv
Size: 512B - Virtual size: 41B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.warp
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icmp
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wars
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ