a5e0b8578fea23a06be9e1038915ce04_JaffaCakes118 | Triage

Sharing

General

Target

a5e0b8578fea23a06be9e1038915ce04_JaffaCakes118
Size

427KB
MD5

a5e0b8578fea23a06be9e1038915ce04
SHA1

73410b77ecdf06714b9e122e407a93eca210b409
SHA256

096881507f70b6dbfa333cf2787255cf87cf24a42f095a43e5cec4863bdf07bc
SHA512

454db127aa79dbed6660eba6ae0a23042264b4e074e34866f66a4c5b50ca73924674367d5c3ded98ccd585096c7f6f292fdb17133139ecb4991a0c34ff815ff1
SSDEEP

6144:aiFUvYoYDm5v8DJtBTd8dbVTh2adDWAzuroj3zjlYL1Q3Rb:aigYLm5EDJtBJ8hrlurovhfRb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5e0b8578fea23a06be9e1038915ce04_JaffaCakes118

Files

a5e0b8578fea23a06be9e1038915ce04_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 232KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ