e855ac46b78e5605c9e64f834a5d334d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e855ac46b78e5605c9e64f834a5d334d_JaffaCakes118
Size

1.1MB
MD5

e855ac46b78e5605c9e64f834a5d334d
SHA1

e41b8229c9a5fdb80ee77b65e2dd08b7e445c0a0
SHA256

2ba809620720ec8b811c943b62bb628172866cb22d26fa68d4ce69f8ab7c0fc5
SHA512

ac509394addc6a583c2b75a240e23c6cffe295b5d8d1de7eacc632cf93190ec7679c0e8e7999d2fde93a9fe1f1d826146a8b9bcb1d4d53bd20247ad85d340729
SSDEEP

24576:SypW9SgLNZaOdcTMuUvxIgdrB5+RTbzgaEGxipVhAcGo3km+2jbohJbnkBy6i:St9SgLNZa6xIcL+FpEMOSBckmt2JbCyl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e855ac46b78e5605c9e64f834a5d334d_JaffaCakes118

Files

e855ac46b78e5605c9e64f834a5d334d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 324KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 748KB - Virtual size: 772KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 676B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ