a34e15ef72c7ec966dd98f04cbbb427d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a34e15ef72c7ec966dd98f04cbbb427d_JaffaCakes118
Size

45KB
MD5

a34e15ef72c7ec966dd98f04cbbb427d
SHA1

2a79efb42e50425e32821b9aab68b03e11ebf188
SHA256

e6c3107d1e00866c2ddb226378c7ed7505247e6052a1bd5b9a08b66c8a8750e6
SHA512

3d5604f6c717da598d5e10b1ca877535eeeb90c160586edb1900f3f80e83a415afec1ea130daac9caf13cbfd523efc16d19bb77e3318ed12e419865bf3b38a41
SSDEEP

768:yhIydfhDKC3R6WNYTXwrbZX8osnCvbxR0eSrUT3vuvsfjY:8IyBtFWqVX8etpvuEfjY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a34e15ef72c7ec966dd98f04cbbb427d_JaffaCakes118

Files

a34e15ef72c7ec966dd98f04cbbb427d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ