625133dd007cb8e1fc41a87e24ea2309_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

625133dd007cb8e1fc41a87e24ea2309_JaffaCakes118
Size

225KB
MD5

625133dd007cb8e1fc41a87e24ea2309
SHA1

ced444817d7ed173be65bbe41398f085c018e242
SHA256

adc4584eb47a2139081aae165f61484dd84b481c8c0d0d76ddd79f943ea042a5
SHA512

149e9af3998152e8dbed34e356c4ecfe40d17f384a5668b80f9adac91f4261a80a8bae011c5cc2641617dee8232407d267550d24d1bf04b2d4fb9bac54f0562e
SSDEEP

6144:aAcveQosFXOyK5xtMedlfikzWA54UawThAyD:bdQosEt5xKIBiYH4Jm6yD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
625133dd007cb8e1fc41a87e24ea2309_JaffaCakes118

Files

625133dd007cb8e1fc41a87e24ea2309_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ