0abab331d0524df50fc703571098962d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0abab331d0524df50fc703571098962d_JaffaCakes118
Size

500KB
MD5

0abab331d0524df50fc703571098962d
SHA1

a74d8e33ff8c2308f4ab653141cd349cdc4636f5
SHA256

429c04247e7c13963fa58adc647c6cbddadab96a59382a0127cf28e8b1539d7c
SHA512

3b5bbc271b1e4ab83a939466e6e3dcf728f71831bb2c2c22755af8a21a57016e6375b1a2008922c1614530001b78268357e3be68e5f5b95188e390aa86bd7bc9
SSDEEP

6144:f111111111Z/11111tvIpl11111111P111111111Z/11111tvIpl11111111tgmj:FGwD6FrTsO7eviZJ7FXTpaHJus

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0abab331d0524df50fc703571098962d_JaffaCakes118

Files

0abab331d0524df50fc703571098962d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8.2MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 89B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ