0aa2fd7060e20cf07c5cf4be4578d4a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0aa2fd7060e20cf07c5cf4be4578d4a0_JaffaCakes118
Size

86KB
MD5

0aa2fd7060e20cf07c5cf4be4578d4a0
SHA1

cc545b8f3773642a09267d8b00933e8add87c982
SHA256

30242ec65173f3c511363877fc3f4b94f8eba856dcad8b484452b2c41a6fc4c3
SHA512

148d40cc15c37ba60fda3183bb9e063f03c9457fd3ca4e6f1313507453df84e60aeea1ba36fb297719d7b30ba977e24fd54b8cd824b8c829995fdcc937c3f637
SSDEEP

1536:k2Zmq4dUltNnpE4zNWYIThgK2WxL2FsxaQNjicOH3zNLLG1Dh:ksp4dANa4z4DKDWB2r+jJOXpHG1Dh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aa2fd7060e20cf07c5cf4be4578d4a0_JaffaCakes118

Files

0aa2fd7060e20cf07c5cf4be4578d4a0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 449KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 586KB - Virtual size: 585KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ