01b4a7c8f6636b078763d373d3f12712_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01b4a7c8f6636b078763d373d3f12712_JaffaCakes118
Size

1.3MB
MD5

01b4a7c8f6636b078763d373d3f12712
SHA1

c6814115ab4123ceac0e5ee0602744bec613d52f
SHA256

30c8a2d988e092e10e8b2b3e8ea7151ce93dfe39682d568a159db0cb241b7baf
SHA512

219fa9c81eaab7effc1cf6b2e476a624aaa733a8860ddf757d6b58c67f174bdf2fb2289cda8852844593f47e9709c286c0fe4a82fa21ecb8a92544128102c6f1
SSDEEP

24576:EfHhvKfiF1N8OPXx33OpfPFmcyou2c6udcKOnEp222222222222222222222222H:hiHNZZ3+pfPFmc/c6zHnEp222222222Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01b4a7c8f6636b078763d373d3f12712_JaffaCakes118

Files

01b4a7c8f6636b078763d373d3f12712_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 537KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 653KB - Virtual size: 652KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ