43c3a36965d89ee003d60680c9b3da31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43c3a36965d89ee003d60680c9b3da31_JaffaCakes118
Size

92KB
MD5

43c3a36965d89ee003d60680c9b3da31
SHA1

b00b34efd1997a62b6b3d3524d029711d64c53e8
SHA256

532df50282236995b98002159022b0dba38a57c12e9d27e8e92511d60c63dcd0
SHA512

2d7ff36d158bdb498e066dc2caf16609075ca41e865d0ae7ff8fc79dc0a4ae84b2a8620da15ba9419660b157204e833f0e1b8aa4de97d521a425ddad5f603228
SSDEEP

1536:NRC7yXLfcwWX5s0MzvH81GUzJLjvUe5NF:vayXwwWJs01GUz1T5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43c3a36965d89ee003d60680c9b3da31_JaffaCakes118

Files

43c3a36965d89ee003d60680c9b3da31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE