32438e9f7afdceed6e501c07d3adcf48_JaffaCakes118 | Triage

Sharing

General

Target

32438e9f7afdceed6e501c07d3adcf48_JaffaCakes118
Size

905KB
MD5

32438e9f7afdceed6e501c07d3adcf48
SHA1

ea92b903057d0727fbb7d1ba265331820f4e4a48
SHA256

be07b93f137547ec5936ebe3417c633297539086b6cea1f1baebf37d3d53aba7
SHA512

03f2d7684f9929679c5e3e125cc744ff89e1c37638676597c0f13402cb53fab6c42cb39f1b8ed806e68a6975db6794c635220d473608308b8798f91bd30172bc
SSDEEP

12288:CmQd+DJHU5F9fpdg3J4TaxIf5kt+oTL1ZMJc3cCser:q8HU5TfpIuTaq7oTL1ZHcIr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32438e9f7afdceed6e501c07d3adcf48_JaffaCakes118

Files

32438e9f7afdceed6e501c07d3adcf48_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 483KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ