348d41a752191756becc92db79bba464_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

348d41a752191756becc92db79bba464_JaffaCakes118
Size

3KB
MD5

348d41a752191756becc92db79bba464
SHA1

5fd86dfd20176321217bb237e3691cf12fcb6f54
SHA256

0b93026a9d7fecd60d40aa25496a06304642e2485fb344c008cc5efb160c0cf2
SHA512

b4deef196c8198d3ad19bc59ee6c200801752aa0324c31e3971e4b70a1a3b535cac778a5a02d8919323c071753a879eb0097264836cc9fd166eed44567e7e82c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
348d41a752191756becc92db79bba464_JaffaCakes118

Files

348d41a752191756becc92db79bba464_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ