a06182cf0b08bda8e4c9e44c3a5c9be4_JaffaCakes118 | Triage

Sharing

General

Target

a06182cf0b08bda8e4c9e44c3a5c9be4_JaffaCakes118
Size

1.3MB
MD5

a06182cf0b08bda8e4c9e44c3a5c9be4
SHA1

e688de0533b09b384ab1f6e374b5a0a89962fdec
SHA256

479d8c38ed722fa0ca2d5496ab80e093103c1a3092b91fe69495ed1f33a060d2
SHA512

d6723fc61ba1048f34556f6d52e7c2af6f9e1cf0d3c82db2122f475dde1bb1155af295844503b4245da6b1ab62a1edd82ee84ea0db40f65bd769dec2e21e93e2
SSDEEP

24576:7xmvPWClcf4HjIjOy86kX+33OpfPFmcyou7dNnEp22222222222222222222222a:7NClcQHsj6o3+pfPFmcudNnEp2222223

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a06182cf0b08bda8e4c9e44c3a5c9be4_JaffaCakes118

Files

a06182cf0b08bda8e4c9e44c3a5c9be4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 569KB - Virtual size: 568KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 657KB - Virtual size: 656KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ