1483204539f18880bfc4b2772bb27eeb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1483204539f18880bfc4b2772bb27eeb_JaffaCakes118
Size

96KB
MD5

1483204539f18880bfc4b2772bb27eeb
SHA1

e118e73a3375149a404f2d7f827446dc02b99df2
SHA256

416139255d60395e0f3d0a9cd63cba6ade27e26ba23348a333f476b3f9066fe0
SHA512

bc2375431556e0ee33f6b59f26af90f00f53fd372dc7983e76f0252feaab8a768bf565ec99d42e9eadbb515d65b79e12b4a27fa518c697d7d6ce0b4b2ee04632
SSDEEP

1536:1iE0zfTx8o4XKYyMWzqazVCJ8IXOlpeS7xcpRHzzOHVEzabZ97bSLHXWoKrC7QaL:XYWoRLzbzoSpeecLcVE+bZ976ba9dG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1483204539f18880bfc4b2772bb27eeb_JaffaCakes118

Files

1483204539f18880bfc4b2772bb27eeb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 324KB - Virtual size: 844KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE