02b48828a41a4a8693138fb805d70cf8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02b48828a41a4a8693138fb805d70cf8_JaffaCakes118
Size

92KB
MD5

02b48828a41a4a8693138fb805d70cf8
SHA1

0d0e985df08063f681ec1340294751e60811e0d3
SHA256

c0e54c5453e1be366bfb5a62f499b6e59f979dbb9faa95990accabb7f1b93766
SHA512

79023168da64ecfc473cb7dfe5957ed3c1e1dace4aa1923a8906f78659a7a46b3bcaa25f08d969973194abfef201b9259cd753f1aef9280d6c48044c2fb891fb
SSDEEP

1536:RwsB5uMx3OG89/nUoC5uIXrc9G/o6dR+je51VJ1kGWqseMmC1vge:R5B5uMx3OGS/UXk2cUMe51uMseMmC1vg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02b48828a41a4a8693138fb805d70cf8_JaffaCakes118

Files

02b48828a41a4a8693138fb805d70cf8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ