7b2a078ba2f69d120eecce529579d6ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b2a078ba2f69d120eecce529579d6ec_JaffaCakes118
Size

714KB
MD5

7b2a078ba2f69d120eecce529579d6ec
SHA1

dec1783b8bb56b64ec29a4286a323ee249bb5187
SHA256

7567f10e1191e473cceb901db94bed3a17d3259dc60035c5aad3deb599234412
SHA512

c3c8aaa3ec8027dc04dcba9ee4772a05114140f5b8dcd0c35f046a0f3786148fea824a55b67e4d09c635695d914fdccf7cc5be7779380a99510b3e7244af2b37
SSDEEP

12288:FUGH09S9x/7rp1DfVENRmjShBRXjIj9xv5ibbd:FUGHzn1DfVEwSfRq58bd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b2a078ba2f69d120eecce529579d6ec_JaffaCakes118

Files

7b2a078ba2f69d120eecce529579d6ec_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ