0527e4b31aba0521eed9099bc0187623_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0527e4b31aba0521eed9099bc0187623_JaffaCakes118
Size

723KB
MD5

0527e4b31aba0521eed9099bc0187623
SHA1

f82cea92a76f0d468e04c760f978d857b38dd17f
SHA256

0b5406ab7e69cb295d27ddc1c6c327fb294ec5a00fef3c0ff92d41548d966d26
SHA512

0e1b89ced0e6edcd520683b28dadc59b45e9509d44f53436eb3a042d1955dfd15ba67daef5bc87e57e244a2ffcf8c8257a67d6244da7f9b0a3e50c52cbd0b5cf
SSDEEP

12288:IkmAqNhBrYvg6QiEDCyxDdy0MBRXjIjb7aD:IN5Bv6QiEjJy0aRQA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0527e4b31aba0521eed9099bc0187623_JaffaCakes118

Files

0527e4b31aba0521eed9099bc0187623_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 251KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ