15547fc863dc5a47dcd9fa2f77d1d1a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15547fc863dc5a47dcd9fa2f77d1d1a2_JaffaCakes118
Size

4KB
MD5

15547fc863dc5a47dcd9fa2f77d1d1a2
SHA1

c4de532ea79767b1f19d16a8e699483c48399763
SHA256

764f1befe2554d913af77a4b0f43bf8823a746948f8ea7c2ceecaff6a290de18
SHA512

c2fcb3ff6273ce8132969b68c103f4b9d35cdb4a457a0784a17b300768c4b14cb145c1db2b306c62c884e21f1b3813636c3a6d519767963503c0c6dd81fc2c54
SSDEEP

96:vybFTxOZLGZH4l7x+zJSE04vhaG9tC9kGSHfG:vyxtZH4hx+04vz9tC9YG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15547fc863dc5a47dcd9fa2f77d1d1a2_JaffaCakes118

Files

15547fc863dc5a47dcd9fa2f77d1d1a2_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wextract.pdb

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38.8MB - Virtual size: 38.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ