2960f7c4ca388a1d65e1938b7dc68792_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2960f7c4ca388a1d65e1938b7dc68792_JaffaCakes118
Size

1.5MB
MD5

2960f7c4ca388a1d65e1938b7dc68792
SHA1

83d73ee70775518f8025c117f2d8217f818a6d06
SHA256

c5357eea39d555157ccf9cf18f272471a48ae2f84f636600e0ff3d09488c1c92
SHA512

710825557cb070bbd9a412ff86d3bfd1a721b0c21dfd2673c4d767999a93d060c24fc220494cc23bf79de06c02f5f32c23d89a60e150fb8eccb2bbead4256c08
SSDEEP

49152:lrq0R07QQmltvKddeCBhzEu7suse7nGSMDg:hq0+7iVKddbBhzUul7D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2960f7c4ca388a1d65e1938b7dc68792_JaffaCakes118

Files

2960f7c4ca388a1d65e1938b7dc68792_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 484KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 676B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ