1593016523db4385e32748fe2f3f5636_JaffaCakes118 | Triage

Sharing

General

Target

1593016523db4385e32748fe2f3f5636_JaffaCakes118
Size

49KB
MD5

1593016523db4385e32748fe2f3f5636
SHA1

b0543317aeed23cc126efaf1c7644f6d547dfad4
SHA256

2160d6f14b4f3f332ed3048f199cdb3697c8d519cf27ccb61e9a0622741e9d1a
SHA512

5edc02e110a0cb2c4d53639b913ce64c9c4e90c5e681193035f53c17798b6b5c78ad6fed2714e5491433f741a5e21778eeb57dff81bb76fdabf46cc8d6d939bd
SSDEEP

768:5yXKaEGzt4BI7k2rksnrfzo9kJTuwEdtBgUuoQQGylHIDZ7/g7//7Az42y:lHper/nrE9kJTuZdtCUvQLIF//7R2y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1593016523db4385e32748fe2f3f5636_JaffaCakes118

Files

1593016523db4385e32748fe2f3f5636_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 591KB - Virtual size: 591KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ