02a46271d3eeba3e817dd3ba7a591532_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02a46271d3eeba3e817dd3ba7a591532_JaffaCakes118
Size

10KB
MD5

02a46271d3eeba3e817dd3ba7a591532
SHA1

dfda0a545bd97af2916b75fc89ae81cfbad7181c
SHA256

b3ef0e168bb711acf37bd26f5142f7aa3a4967adf88057adb3008dc1728dd11a
SHA512

2f46fba6d67c24770450ecf0a8e59a9b4ed076ee6274f697cf155c20b7226c5febea64d10a35c43c1fc562acc52c3082c5b62d139a4fd95c2304e1cb4e6dd44c
SSDEEP

192:ywNql6mk7Smi2UNHxPXGUGInisgK11+A8T/5rnPk9BrA/:qAmoSh2NInispXZ8T/5r83A/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02a46271d3eeba3e817dd3ba7a591532_JaffaCakes118

Files

02a46271d3eeba3e817dd3ba7a591532_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17.7MB - Virtual size: 17.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ