1156b7f9ecac1b5dabc3d5757dd132cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1156b7f9ecac1b5dabc3d5757dd132cc_JaffaCakes118
Size

368KB
MD5

1156b7f9ecac1b5dabc3d5757dd132cc
SHA1

2156bb548bf909b2364a8b148350bb66886f762a
SHA256

22b9f0122102a1011422f829df2f7384f26ae71ec6854e1b7660196511f7ff64
SHA512

16048c5b31537f0bc7118049cd5564f836145f5f9c2c1f7d0bd0a94ac4fe05276c0d52ecd650142e2d71ad04261fd82a220f3b7fd68bc7c5450c9d0194bc75fc
SSDEEP

6144:RTAp4naqm5GR/0N4Ftn6vicI8qtQQenKDFujBeqSDgzB8jk3E:R041m5Q/0N4L9xYus1NSD2Cg3E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1156b7f9ecac1b5dabc3d5757dd132cc_JaffaCakes118

Files

1156b7f9ecac1b5dabc3d5757dd132cc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 206KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ