01352868ad33547211ffdcc015a813ee_JaffaCakes118 | Triage

Sharing

General

Target

01352868ad33547211ffdcc015a813ee_JaffaCakes118
Size

2.2MB
MD5

01352868ad33547211ffdcc015a813ee
SHA1

db26ab10b8b974fe87d6a6aae42dbbeca80ecacf
SHA256

85243bb23568156dede6a4bc766ca2ad163105e0ae5ee3b7e069c1c08ce063bc
SHA512

acbb65850abe97974bf991a88f96554eb2faf8e49efc107c41df49f7ae71e9df21ae9824f70e8cff93b8ff25152681f2f036624ffff57f3eb41a8ebf72904397
SSDEEP

49152:OYbr4Z+QWTPIjXeUoJ9SNK7khUjzSGUYZqi09aLmRRWvunaH8/:OYbr4NEPIjXeUMSNKDjzSGU19aLmuvua

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01352868ad33547211ffdcc015a813ee_JaffaCakes118

Files

01352868ad33547211ffdcc015a813ee_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 399KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ