b631e93f1ca7764e3e3afeb0829e353d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b631e93f1ca7764e3e3afeb0829e353d_JaffaCakes118
Size

689KB
MD5

b631e93f1ca7764e3e3afeb0829e353d
SHA1

a03e5ac3781b0f16d3dd8a5d3507ed0119410ad3
SHA256

7b95aa6c3aabacb0e4338318eeb7694903eed33f8916f242911017ce63fc509a
SHA512

a4dd95eeb0c7202d7a83283abc5049468949745eb74dfa49081f4c5aa1808c5630e8962239af25c809239a629cfb1d01a034f08e250cc8f8814cb07a3a2d2dab
SSDEEP

12288:mYlNhgqhs4zzIVVFXvlGYCWTQBRXjIj7l28:mYfhgqhlzIhXvlG0WR428

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b631e93f1ca7764e3e3afeb0829e353d_JaffaCakes118

Files

b631e93f1ca7764e3e3afeb0829e353d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 311KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ