1581b42bc10a73f5a2c769ec54f1a359_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1581b42bc10a73f5a2c769ec54f1a359_JaffaCakes118
Size

448KB
MD5

1581b42bc10a73f5a2c769ec54f1a359
SHA1

1564bf8d0755d2dbd1b8f0208ea8e2225aa5f6b9
SHA256

6c94f37be7edaa40d9c0f024ab8f01fcbf1f27b8bf44f6fa562b091d8a1752ce
SHA512

0420ffd44ab1372b73f4f13841a6c3b0c4fb2b4e0eac2c931ed2c797555a74c064f7dbd504549bdef2f06ceb0d9977d98f7cc2d89a46fd7352b06330b7d5ba70
SSDEEP

12288:3Vqz/fIFWLoMTW6R9RChthnr0DeLGb7FGf:3Uj4MTWjhjryyGHFGf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1581b42bc10a73f5a2c769ec54f1a359_JaffaCakes118

Files

1581b42bc10a73f5a2c769ec54f1a359_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 637KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.offlib
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 199KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 469KB - Virtual size: 469KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ