43c195311a9251fa78939d1475338096_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43c195311a9251fa78939d1475338096_JaffaCakes118
Size

225KB
MD5

43c195311a9251fa78939d1475338096
SHA1

d4a120e8f3b5c9938b3e3558184d7fc74f9e2c57
SHA256

6066875b91385b1fe289be6bd774536971862e1de591ac85df663616415f350f
SHA512

c3ee503825c5b11038c68a8c5547dfd6fd156142f5bea29fd9116a7f5011e370134ae21da7d972d66ff3ce0391b81c7ae578e1044f55a37c4f4a76a9f5e02ccf
SSDEEP

6144:b1uV4nDWgRAkP8XW0b3P8bUGIGoKuAb5bQbUEe7:BuoR3PSNP8tIrw5nf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43c195311a9251fa78939d1475338096_JaffaCakes118

Files

43c195311a9251fa78939d1475338096_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE