158a353dfb76131c065c644f262721cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

158a353dfb76131c065c644f262721cb_JaffaCakes118
Size

366KB
MD5

158a353dfb76131c065c644f262721cb
SHA1

244abaf466233a3f6b3b97aec501f7bdc0a68d32
SHA256

ba031f7d1eb7e2ff34155ba1c74f3b4bf7ba7369de0c15d83ace2538f7ce88b9
SHA512

bd44d3c02f99fa535d617a19700b79327f90729df29c77dcb08b2958fe4e7ebb7e1d07cf707cdce036230770f911ffd7c38246464f87ab0b241478d6a50f6264
SSDEEP

6144:rpMAnb9KAxG1D6nRoEDW16PyFGqqE652kTbS1RX54cwWDM/LSs0EDoDma2ec5psC:rpFb9jxG1pCWdFGqascbQycJDMzSs0EJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
158a353dfb76131c065c644f262721cb_JaffaCakes118

Files

158a353dfb76131c065c644f262721cb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 449KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ