121edd213a423d2fca6d89781efd6ce2_JaffaCakes118 | Triage

Sharing

General

Target

121edd213a423d2fca6d89781efd6ce2_JaffaCakes118
Size

1.4MB
MD5

121edd213a423d2fca6d89781efd6ce2
SHA1

40948ec05dde16844c977ebe18ac9c0d00c51637
SHA256

15271c3e464a034f85218f9f5bfdd3ec566a8af9467d59d248d2b58a37f86f0a
SHA512

93100e1480be3c3e01cedd7b19d7d28b293e97664a17c4690bb6be5f7317c5a58d38cf2956801f34b6a9b4d229782a327f642385e7ce50f56a6c34183b5ad202
SSDEEP

24576:6zeiSBnnAUzzBdx0eJ4nVbK3I4KEXdjCGNbidGBqdB8V3rAGHOWBZDh2ePP6jLGB:8ezB9zBdTz3IGjCGNpeB8HOWBZl2ekEB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
121edd213a423d2fca6d89781efd6ce2_JaffaCakes118

Files

121edd213a423d2fca6d89781efd6ce2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vsp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE