1043f1fbc72bac36494edb69de160117_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1043f1fbc72bac36494edb69de160117_JaffaCakes118
Size

328KB
MD5

1043f1fbc72bac36494edb69de160117
SHA1

8fd593ba4dfa78d158c763c8712a3a1d7e2175c3
SHA256

c145ce739ad6c093bdd6d1b5059eaecfc8971cb73c1856185239aaff40a56cfa
SHA512

2a9f6447b752036e2b1230ff7c0b189ea93819753bfb37069a86dca7c82ece12a46e61f23ad41129d93d5d3fe423c3c5337e1151918e4fdeb690236ed5f5b7e1
SSDEEP

6144:sRjUcK5+gfpUOi0LTTwo/JskNAVNJN584eeD:sRYc4+gun0UIykqVNJN24e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1043f1fbc72bac36494edb69de160117_JaffaCakes118

Files

1043f1fbc72bac36494edb69de160117_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ