2227c0999c1fb441813c0fa0c3ccdcd6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2227c0999c1fb441813c0fa0c3ccdcd6_JaffaCakes118
Size

575KB
MD5

2227c0999c1fb441813c0fa0c3ccdcd6
SHA1

44800aeaf8eb87f7b044627916eadf6958289b38
SHA256

9832a74c4e3258c68dcb0c66ff6dce60c69245ce5a06ade6447179f44f8183b9
SHA512

24d97673c2138e6d22fb3b0db9f5b86869c0e605d790fbb7d5747f40939943eed51f6f1df77faea0599cf292befff9fc37551f6e40f0bb7c4144d017c537e2c2
SSDEEP

12288:0Z1BH/A2cwLLLm/udfilv97wDrBcW2U28q7xBEoQRjBxq2hdtecHJo1j2a2s9BgC:05H421hquSBpOBxLhdtecK1jt28gxPE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2227c0999c1fb441813c0fa0c3ccdcd6_JaffaCakes118

Files

2227c0999c1fb441813c0fa0c3ccdcd6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ