a8ef0de592c46690471f72f81cbdd605_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8ef0de592c46690471f72f81cbdd605_JaffaCakes118
Size

422KB
MD5

a8ef0de592c46690471f72f81cbdd605
SHA1

280e24795b5c84fef26dd25feaaa1be4ff919a24
SHA256

93c70ff63c4769db8712a45fd8d64343b0d63ffa9f593f16cd780f38466bc98d
SHA512

c23e8eb2582fcda96dc87ab133a0fbf6f9d0a3e807c989ffdc51d589147c8034e4bcc1bffc79a2a9ce70cd50a0c3ee46f02db7e36319f0b4f98413c541578c83
SSDEEP

6144:ykB1INZdWaFzaE7mDGg7Y4+MFyBPys80G5sEOi9Ri9na5UVx3:ykBgdW/E7mDGg8xMkBp80GiZa5UVh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8ef0de592c46690471f72f81cbdd605_JaffaCakes118

Files

a8ef0de592c46690471f72f81cbdd605_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ