f3a444e5ba43ff851733887a216bda76_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3a444e5ba43ff851733887a216bda76_JaffaCakes118
Size

1.6MB
MD5

f3a444e5ba43ff851733887a216bda76
SHA1

cba545945c20446198eabd0dfdd937eaba742948
SHA256

e2d5b605f689038050bf6dd1d239d9db68f602b60a9f65d602de3c7110a96b87
SHA512

645737e01949fbd5a6e5754e6cd7e9020971a718a9a5498ea44df47cecc732796218ce380be8cdba9aaa032876dca3b064b6a75da5116ed78089933a6d83582d
SSDEEP

24576:QrMqSGe7F29ZETNy1AMjyEU850BP6VlRWJqmrLZPLJAnGO3bu:1VFumNyZjR5vVlIJqmrhLz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3a444e5ba43ff851733887a216bda76_JaffaCakes118

Files

f3a444e5ba43ff851733887a216bda76_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 591KB - Virtual size: 590KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 639KB - Virtual size: 639KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ