843ab6a6151794a6c5894178248dda24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

843ab6a6151794a6c5894178248dda24_JaffaCakes118
Size

367KB
MD5

843ab6a6151794a6c5894178248dda24
SHA1

6dee5a5a9a67abb3ee11103f009fb37af80e7c56
SHA256

4b9f36d0a0f9c3f0a2066a77dd404b94918da21ff3162f628cd8f3b5352733d5
SHA512

4f5938e475046178101501ff5285088b1eb1f5245796223e2755292d493bb4faeae46c5805144a45d8651ae7c85c0bf6cfe244510beba4db52573893efd0d68b
SSDEEP

6144:rpEcAd/Mm5ZkyUneRTnJOmQ4W4/6zA5K0TzJRCp4xRvKUllD/W13+/x:rTAOm5eyUnJmCzAXTzJR3RvK6lCw/x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
843ab6a6151794a6c5894178248dda24_JaffaCakes118

Files

843ab6a6151794a6c5894178248dda24_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 205KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ