02336426c917b965b66417654e64cad9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02336426c917b965b66417654e64cad9_JaffaCakes118
Size

743KB
MD5

02336426c917b965b66417654e64cad9
SHA1

082167dbd146371fbe881b33f2685161a54f8326
SHA256

ea5b072e82b9f719f6703f6ac3e989ec029d7fbc18b683f26d0eb91574ad6f21
SHA512

b7b1002c27a080299e15bfa6c133a794556a43f26d9784d5fa94b224de82328c2ff76eb7027229bd99a6fc5ed39ed1af67e714f7c64f708f4fdf211bbf8881d4
SSDEEP

12288:487NVnCM0++J8GrhplGMXHKroPMPwlLSBRXjIjKl0GScfQL2lAYE:48ZVCVVJ8GBGMXHZymLMR70GQ2iYE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02336426c917b965b66417654e64cad9_JaffaCakes118

Files

02336426c917b965b66417654e64cad9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 359KB - Virtual size: 358KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ