01e1358e988ff13aa3553cda853c672a_JaffaCakes118 | Triage

Sharing

General

Target

01e1358e988ff13aa3553cda853c672a_JaffaCakes118
Size

699KB
MD5

01e1358e988ff13aa3553cda853c672a
SHA1

6992aa561d5537d1abd694f877f9fc7eb4d4e1c3
SHA256

3ac70a70b1d19118d081903badfebef3d83c35035a961a5e501d0965a4102068
SHA512

2e010bb83cfd47ccf262ebcb31074388db2ac995482ddac40b2570bf662c88c103b00f8efe02ac5695ed3559fb980ab9699aa30c473b7328968739f679ad7d36
SSDEEP

12288:vdyH+dDQqRZHTdn807yX9ZKBRXjIjL5ckf1ygC:vdKqRZHTd8RNZkRUckfW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01e1358e988ff13aa3553cda853c672a_JaffaCakes118

Files

01e1358e988ff13aa3553cda853c672a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ