a1c141e3a1a932bf5afe9ef26499f7ff_JaffaCakes118 | Triage

Sharing

General

Target

a1c141e3a1a932bf5afe9ef26499f7ff_JaffaCakes118
Size

436KB
MD5

a1c141e3a1a932bf5afe9ef26499f7ff
SHA1

117ebef27431d3f42a4cfb5a257f46dcc92f9183
SHA256

dce28f506ae36de69da36379ea6e005c715d7d8082cb64b17cbdf2265412da0a
SHA512

0619533140616af7b905f96c15b5e35274b3782493c720cd146f8c5c12126c1481e6c5612e288497fd09669f1282d6553642f2b3585de93c70e4de100a80e885
SSDEEP

12288:Z9Z8m5DuEy2f+73v3m0/HkWRpsslw9rV:Z9Z8mPrm73n/nNlw9rV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1c141e3a1a932bf5afe9ef26499f7ff_JaffaCakes118

Files

a1c141e3a1a932bf5afe9ef26499f7ff_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 245KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ