091b8f991df74b63c70868de463b4126_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

091b8f991df74b63c70868de463b4126_JaffaCakes118
Size

1.0MB
MD5

091b8f991df74b63c70868de463b4126
SHA1

cb01aa0e173c7ab98eca229a77a917c3905ed499
SHA256

7b4ce7d09687fd7f76737f4dabe20d27aca87668c6e33e5f2f94570de63c567c
SHA512

d73716478fa05657c1dce6e0f4ff8aed7e6ecb43b035c62d200a3a70184c0685ef8e0f35ab46375df011757356997fa06801ee179a6f73ce24aa76d02ad555dc
SSDEEP

12288:mYWs5ZU5ltaBVuM4oi0BAM+FQTgeTRxHPzw0Hm1LoERJZzN9EoTqO28zSLnECKRs:m+znR+YuDDPTVfRjzP0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
091b8f991df74b63c70868de463b4126_JaffaCakes118

Files

091b8f991df74b63c70868de463b4126_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 693KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 263KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 842B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ