ad10626800e8862b19a7098b43139e43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad10626800e8862b19a7098b43139e43_JaffaCakes118
Size

201KB
MD5

ad10626800e8862b19a7098b43139e43
SHA1

ef7e61ff8d09500afc8b9d6376c343b24c7329b3
SHA256

057671cd24cd5ac69b6a52b373c8ccb4178538273d8b25e879811ad12370ee17
SHA512

2e7df055774b64d43247d0edfa3fbb80aa61761a0535674c5b85c0a2901df657f73ffe58adca821dcbaa5a4d2bae89c3aca78e1927f600945e50705c16f147cf
SSDEEP

6144:jroh/xcvVXOycGGzZmDQburWzFaxo7Y8ldR4qU:+/qXcGgWeuQ4xo7YJJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad10626800e8862b19a7098b43139e43_JaffaCakes118

Files

ad10626800e8862b19a7098b43139e43_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ