01d6e925119b926c1ef4a882291088e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01d6e925119b926c1ef4a882291088e4_JaffaCakes118
Size

71KB
MD5

01d6e925119b926c1ef4a882291088e4
SHA1

e085b61367cbab01b1d9db4faf886b6cfdd88c00
SHA256

9870e4c32bef92f31f363f5a5f60ff442408ab6cc8bb79cd4eac8f40fd99d12a
SHA512

0cb9f116229c923698fdffed5e068abbd944b603367129e8dff9359bc8e9da3c6cd1621999705fd726f64601bf0d0e2764eea370fdbfeda09096a03a6454a55a
SSDEEP

1536:sZZohLeOAPvX7VWLOLQQFyYaA6rT2CxEchoH8Ls1m8j3/MH89pR3BKz+9zn:iiVeJ/7RLB4YkxKx1m8j3/MH89phBx97

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01d6e925119b926c1ef4a882291088e4_JaffaCakes118

Files

01d6e925119b926c1ef4a882291088e4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 219KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 411KB - Virtual size: 421KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ