83a08d9c8527557759b81173e05369c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83a08d9c8527557759b81173e05369c4_JaffaCakes118
Size

1.3MB
MD5

83a08d9c8527557759b81173e05369c4
SHA1

cd0379f7fc194e9dbc13643173ba09b782a2cf43
SHA256

55184a99eb7ed2ee53cc6efa973f991f0b20a4cafdaa79f00babd4344ea3b6c9
SHA512

e83cebbe159b0fc16de8c3022992ddd5cd973941904522a64afba69d79c64538e0194f0713185249fa0e4b29cd4ed0a32a36d11949d16880f91c740db93a1576
SSDEEP

12288:08nV2r1paH3ZRbAWUAwrgaUcZp5imnsAsWCfUiuvAGkuJt/QfMBAl9UlZB:fnV2+zAWVkGMjJnDup8BrB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83a08d9c8527557759b81173e05369c4_JaffaCakes118

Files

83a08d9c8527557759b81173e05369c4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 766KB - Virtual size: 765KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 407KB - Virtual size: 407KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ