a1a70a7a034f5d8a171b23ee9ef89019_JaffaCakes118 | Triage

Sharing

General

Target

a1a70a7a034f5d8a171b23ee9ef89019_JaffaCakes118
Size

212KB
MD5

a1a70a7a034f5d8a171b23ee9ef89019
SHA1

b09aac38dd6c67c3e68c675c136b239e1b256cf3
SHA256

e25904cacb050181d38e72c8139313600f0a4cf8b6fa2fb5a96af4b07af98b09
SHA512

f9becb67467b1951bf38fbbe8f8b9770f48776eda1ef489fcf4f034303abd6f287633d77b62a412b2d5d58b3fa8b65ffe970a0f81c7206d1ed11e9be51acf0d9
SSDEEP

3072:0y2EevyNMyhKN0g/D9lyovGLfof58ji4+7y9aqWLNOO:dWm/+DDvvf58u4FSd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1a70a7a034f5d8a171b23ee9ef89019_JaffaCakes118

Files

a1a70a7a034f5d8a171b23ee9ef89019_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ