0022672314788f305ad1a50ccaaa6b5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0022672314788f305ad1a50ccaaa6b5e_JaffaCakes118
Size

708KB
MD5

0022672314788f305ad1a50ccaaa6b5e
SHA1

4f00ab730f52b566c91d93f804acdd296fcb2c11
SHA256

1e0b18d491b2e2cbf3c89be9bc00d8cc5e9d9946ae292e4f61077145a836e8b0
SHA512

cbfbfbfa31e30a2e662f34163b6a35b0db586767a4251ed3a1dc96a84e7816b9aadb534fc875cf0bee17f3ac595d89f8707cb861c6f84fa56bcf3897b9cb21ec
SSDEEP

12288:J6w3crdt3xaJFpzrnz9cRdmlh+BRXjIj25cYfDQSY:J60M8pzrnz9omlhwRjcYESY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0022672314788f305ad1a50ccaaa6b5e_JaffaCakes118

Files

0022672314788f305ad1a50ccaaa6b5e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ