063c287e545d4e9516ad5f8b86ecc36f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

063c287e545d4e9516ad5f8b86ecc36f_JaffaCakes118
Size

2.1MB
MD5

063c287e545d4e9516ad5f8b86ecc36f
SHA1

dc54fe63a5bbc4f1b31751073bf38921ce2bd1ac
SHA256

5cb638041dc7eef143a5a6816dea4aab81e6ea0c877788346a5748de79fc8c36
SHA512

1996c471ffb84ee469565590c69583b9479428b2d7892ad40066ff2d7d0f30a0d524d9486b8a3b347c11b6125e85f920bd4d9eb276a6509fd843189529b26f59
SSDEEP

49152:agk46vvuJTlvE64Igi/bmHZxyOBOcmz3eNFTb0uuQ8:fbYHPyfcmzAQuuQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
063c287e545d4e9516ad5f8b86ecc36f_JaffaCakes118

Files

063c287e545d4e9516ad5f8b86ecc36f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ