0567b985bc71076c4ceac459ad55f690_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0567b985bc71076c4ceac459ad55f690_JaffaCakes118
Size

522KB
MD5

0567b985bc71076c4ceac459ad55f690
SHA1

9591f91e05ce75fdb14c75a9274f5cf176cfc28e
SHA256

1347a59afb974d3ed83aa6396adfecb702ae9f97532e297a89d37e11326e7466
SHA512

82b6ad7b32ff43643273e916e778eb468f07ac6606870878d12a30b9105944eac6f7cde7e9f0a0c11fad478a4d60dd212714d45f0f564fb54cdfabefa42197cd
SSDEEP

6144:BeGF5ZF6UP4f64GiH24HamhoDQ8kP85PdGQe/b1wgu1OiPjux09pXB8ndJ:hV3PN8ODQ8885Pda/b1wVfPjHx8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0567b985bc71076c4ceac459ad55f690_JaffaCakes118

Files

0567b985bc71076c4ceac459ad55f690_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 305KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ