43c5e8b806761441bf64664da8c51d5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43c5e8b806761441bf64664da8c51d5f_JaffaCakes118
Size

4.3MB
MD5

43c5e8b806761441bf64664da8c51d5f
SHA1

82e52e521cd2b215c5b791c6684fec10db7cd3eb
SHA256

80d220245542aa8fc605ef5de24cf7a9feb5944a45b131220f3bbd6119169bcc
SHA512

b4d9286418fd7312e1e81cb6fce93f6af479e61a2d044c2c2b6a06fb61f528142c9e41b6fc65f49a25a025409d1d0bbf0289b6aece47de8be3e8e2af78de4e55
SSDEEP

98304:GcVSFE61CukQpsMIdXEywyGxm1XHx15xJCXkBLkUTqys56qfs16ABbW:GcVSK61Erb4hm1XjJCXklZs5/4W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43c5e8b806761441bf64664da8c51d5f_JaffaCakes118

Files

43c5e8b806761441bf64664da8c51d5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SVN\program\ziparchive_dropbox\loader\obj\Release\hdnfk.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ