f82e0046a08422fb7438fb9b44d6c950_JaffaCakes118 | Triage

Sharing

General

Target

f82e0046a08422fb7438fb9b44d6c950_JaffaCakes118
Size

313KB
MD5

f82e0046a08422fb7438fb9b44d6c950
SHA1

b639f8074eceac8fe5c3690ea5b80e5d1a6f49b0
SHA256

16d12057b55851d2cdf591d4b76ca2369ac3ffa9f919e0affbe6f022ca072366
SHA512

a0f283c693b8453cabee6f9df3a47944453963ce0684755cf65a1364dab7029cdf10afe908eccaef18ba933f468e84d64c2296ce0cc2b485db64137057ba5c83
SSDEEP

6144:SoKnaembZf9AVfeYc0gkF5Xf6QY/6cATAQLh3++i2Wgwj:9KQx9k7XMD/nxt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f82e0046a08422fb7438fb9b44d6c950_JaffaCakes118

Files

f82e0046a08422fb7438fb9b44d6c950_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE