b2ac67dad624be854341627166801eee_JaffaCakes118 | Triage

Sharing

General

Target

b2ac67dad624be854341627166801eee_JaffaCakes118
Size

423KB
MD5

b2ac67dad624be854341627166801eee
SHA1

130602d8e51b3b641f09baae34509ffe93700811
SHA256

b1a89b4b3019026436fef5be3bf9d7806581f00dbbd0e7a2a0f17cb5717025ea
SHA512

b4613aa42c7f0b90a15c7cd18c69e85af50bbc2d7b0a265bf71046a3c069e98efd829ee00a5506e2a8983d5ecd65e4843b970ccfa7e511ec08f91d4e2d47d2ee
SSDEEP

12288:ysHIB7QkKRaug8yeikCykaAOl13l0Pz8MBqI8:ysHU7+h5yeilykkln0PzZBqI8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2ac67dad624be854341627166801eee_JaffaCakes118

Files

b2ac67dad624be854341627166801eee_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 243KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ