af1ac4cd820f234eea9b9b3b16663ccd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af1ac4cd820f234eea9b9b3b16663ccd_JaffaCakes118
Size

104KB
MD5

af1ac4cd820f234eea9b9b3b16663ccd
SHA1

53a29957e721adab14ae126d87803fb61f674781
SHA256

843c56b66fd0c5599313e4cf6881d1aa7214918092c3c67dbcd9e5aca3dee5cb
SHA512

7574227c0411f02659f824059dfe9dc9d7597ea71decda27bb16850ec7d1c471e8a78cc26f82d596c9bb96ddee8632b288fca01893171850a3750aec7e7caddf
SSDEEP

3072:9GnHLVnKMVLeJm4PBd0dh//tjYC51vClzmEpV8L:U2JhG//t8C5VClnDs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af1ac4cd820f234eea9b9b3b16663ccd_JaffaCakes118

Files

af1ac4cd820f234eea9b9b3b16663ccd_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 385KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ