630c21a445c205505221ce85753305a9_JaffaCakes118 | Triage

Sharing

General

Target

630c21a445c205505221ce85753305a9_JaffaCakes118
Size

30KB
MD5

630c21a445c205505221ce85753305a9
SHA1

c5250b5f361025445791ba5d4d7a3e407eba2578
SHA256

0956bc121028e4e1883277680b745a1707b83e90485c392f3943c9259b51524c
SHA512

ecec55a8ccea0158a3b200d560cf22483336377e571faf6d6226dfa000f887df09108134a3509b6bb6e49b2565098620fd8e992ade5326c8d8991c60cd1d47be
SSDEEP

384:k3gCPh3YEPbyvnkYUROXpG6k4xHVNzvCvhECXeUJRX4NwWZxg5yJy53tWObWjBCg:ABtqmRwptVVUvvewUTJy5dxKZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
630c21a445c205505221ce85753305a9_JaffaCakes118

Files

630c21a445c205505221ce85753305a9_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

BSS
Size: - Virtual size: 48KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 493B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ