152e5538bf2bb3770ab58e0a3d2199ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

152e5538bf2bb3770ab58e0a3d2199ab_JaffaCakes118
Size

160KB
MD5

152e5538bf2bb3770ab58e0a3d2199ab
SHA1

e9d88c7cdb27d1e42edc1c76bb51e7236b5748cb
SHA256

4332944c885f56b501090e4a085a2c5d24f6c994abc628b2fa026af72c2c1c38
SHA512

54dbe41e2db0c6ae122332b2d7e8da27f1e53fd946e041db5a5f70b248bc78959d532bdf955fad7bcc114a14e42f2fa9d7fd32767f213d0a4133a8d0f89d4c7e
SSDEEP

3072:JY/SINRk1kxz1Lewor2d6XhFimeP5KNOOnPTBpX9G/ssIFDCnln:q81OZLem6XhYmQ0PPdVoItCln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
152e5538bf2bb3770ab58e0a3d2199ab_JaffaCakes118

Files

152e5538bf2bb3770ab58e0a3d2199ab_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 576KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ