10368508766f1851f33d3e9db1452b8d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10368508766f1851f33d3e9db1452b8d_JaffaCakes118
Size

1.0MB
MD5

10368508766f1851f33d3e9db1452b8d
SHA1

0dd22905a650df6ac91a17dfd1446b2b232802ac
SHA256

c550ca597d9d6fff63263912d16b4c42abf3bce2eddb600069d5864c644ece33
SHA512

f92d11a6f6c5ed12a8b0da76f6c966349887503234099c9fb93d967e50fdeba652e210ed1584a321837b77acd828212f9c5d4784b44302af0e8b702507bf8981
SSDEEP

24576:3EkpKiK2YHOvUpDyEt8nR21cdaHiFBK7GYTNTySUbElAHKhvw1QJoixqEEXUuiwc:3nbKZOcpDyEt8U1KBAGYT11UbElAH2oK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10368508766f1851f33d3e9db1452b8d_JaffaCakes118

Files

10368508766f1851f33d3e9db1452b8d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 317KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

flag_dat
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ