198e5ae497a4d64393b33ba7a935ecaa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

198e5ae497a4d64393b33ba7a935ecaa_JaffaCakes118
Size

79KB
MD5

198e5ae497a4d64393b33ba7a935ecaa
SHA1

d3db84f17ba57e05fbdb3871f83399b9aeb7cd72
SHA256

669edd9ddff349143042a87a3357a14754cbe6145ae884aa162efb9ad16b689e
SHA512

85305dd9a94b631b78c41c5327930be3d263f37a353af06295c4644b5cae693933aae00dfc67f67c4290345fa9c891ef21cb9a36856a2da9e69354e90a54747e
SSDEEP

1536:NCU7AFpesJMbBunMAortBi0fQdu9jf0NH:NCUkTesJMbBunMAortBDfQqf8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
198e5ae497a4d64393b33ba7a935ecaa_JaffaCakes118

Files

198e5ae497a4d64393b33ba7a935ecaa_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

iesetup.pdb

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ