180f3c9b164f8f11e5dc08a23e13a76a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

180f3c9b164f8f11e5dc08a23e13a76a_JaffaCakes118
Size

582KB
MD5

180f3c9b164f8f11e5dc08a23e13a76a
SHA1

b4fd55cf6422d6d30e0423f0aa3f1645741fb988
SHA256

53edf8900b17ae80d06e1ddd3cc9c1edbe7c4f6d3b80b52a16e5005a8da7b8c3
SHA512

4ba0dc07f3d3f9d2a23d1c3f6fc0df44e27b1accf18c67f4e447ab5e414a5d11115ffc6b58d2b0031a547a43ac4cf2404dce510886a08fa2fe328f93925081a2
SSDEEP

12288:ZPm3ap4ObD3EZPsEQHvbjaytR2CHitPL5v2fo8X5zLvSUBprcHeNL2Pt91E:Z+abX02w8VLvSUbcHSL2Pt91E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
180f3c9b164f8f11e5dc08a23e13a76a_JaffaCakes118

Files

180f3c9b164f8f11e5dc08a23e13a76a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 333KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ