c341b488702dc0861600d0ed42d97472_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c341b488702dc0861600d0ed42d97472_JaffaCakes118
Size

194KB
MD5

c341b488702dc0861600d0ed42d97472
SHA1

50118507acd19ef5b9a408dabbc988191ba436d9
SHA256

819365de3051e613d9e6d28b92d2cdb338b18a337fa9521c17e52a9ed483b4b0
SHA512

c33f5ffdc011bc07ee6e5ee5eedfac2fc839059b976691d04366d372acc56dcb340d11a119d9ea35b11d432a2c17547471624861f63babd4fa8f4c6c15a652bb
SSDEEP

6144:fd1E6dqi4py5TVD+Tyi5d1E6dqi4py50zUvoLd:bEy1T8XNEy18Ld

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c341b488702dc0861600d0ed42d97472_JaffaCakes118

Files

c341b488702dc0861600d0ed42d97472_JaffaCakes118
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nep
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ