abba765ecc51ea5a470ffb00eed9e0e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abba765ecc51ea5a470ffb00eed9e0e5_JaffaCakes118
Size

580KB
MD5

abba765ecc51ea5a470ffb00eed9e0e5
SHA1

b8263b52afd86666467ff5561152e4178ee9443a
SHA256

195c53c068bbceb701bb5d9449b499cf166d9d187f627d30b9afa8de010ae5a5
SHA512

b45cff0a81b8df1e67210993957c218c0042393fe91837ff28c95c17d88b0a8e9fcc1d1bc7f01bdf522410a747cc11c322b306be2a0a06fec271b9fd95039145
SSDEEP

12288:TUXtRJJjtXdPq12Xz57BmBZwEbZjCREb3UsDf2OhGC2o3Ks2nrt6Xd0FfBJZKhQM:TmR3jtBX1Eb37Gno352nrt6qFfDZKhJv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abba765ecc51ea5a470ffb00eed9e0e5_JaffaCakes118

Files

abba765ecc51ea5a470ffb00eed9e0e5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 329KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ