2287c75d99e58b61011289d6e528ee98_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2287c75d99e58b61011289d6e528ee98_JaffaCakes118
Size

321KB
MD5

2287c75d99e58b61011289d6e528ee98
SHA1

4113911d9d16be5e0ede83ef53ece3e39bcb54ac
SHA256

bf04e787c7dd79843ba000af71b36353636304d4da8b351705128fd4c2de0f59
SHA512

5a822950f83de4d220dda1ae92e520166cc7ed951a7d564558e78d7d8be87fa8c1a0ee2efd53c39cca659206e0fd6f8d56066e759f4759377e79d78fcad3f4b3
SSDEEP

6144:OTj1OTEKnsub1upoH7td/tQqG56Prd3Z5NBA3r14lJDNIl:OFOoKnsub6oHprG5+3a7STY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2287c75d99e58b61011289d6e528ee98_JaffaCakes118

Files

2287c75d99e58b61011289d6e528ee98_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 161KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ