a02608cadec0dfe013dd8d0a7746238e_JaffaCakes118 | Triage

Sharing

General

Target

a02608cadec0dfe013dd8d0a7746238e_JaffaCakes118
Size

516KB
MD5

a02608cadec0dfe013dd8d0a7746238e
SHA1

d795255f57c3550bcc827211a6dc06f8df7552be
SHA256

97d9b06e9f920132230c2f769dbc3acba0ba47e66dd4bea1797193e550493699
SHA512

4bfd1f99a20e7ed464d9785a683e210c0769d2c03e0d71f239ff840caa8e6b61ee26091f89c1bbf02c1ab09e71ac9f4474c492be98c29855049286d9690d5c6f
SSDEEP

6144:/FSyTuIjB1YZ+2QlCq97xIerZKxlxQT8ynmIp4SQurYNnbVP1A52qdS:/Ft+Z+2YCqkeUCT1n1VQJJxIdS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a02608cadec0dfe013dd8d0a7746238e_JaffaCakes118

Files

a02608cadec0dfe013dd8d0a7746238e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 355KB - Virtual size: 355KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ