1a6049a53532ecf812f9a67c0d8b015a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a6049a53532ecf812f9a67c0d8b015a_JaffaCakes118
Size

307KB
MD5

1a6049a53532ecf812f9a67c0d8b015a
SHA1

8b4b6901c576e3d5a10514e95a38471ddf360ebb
SHA256

192deb6893a6b9424d10079045d6c64173220f494698d5a6992d1d31fb3ca284
SHA512

618ea4d2a0a1ae2173ff7fd43941fef90611de0f63929a09d270b74250839c67a1300653a273b2ca6bff82ff28f43e1a0ff3781f9a779ba60c69283938d716d8
SSDEEP

6144:K0vzaT72Y0S5xzinYKTY1SQshfRPVQe1MZkIYSccr7wbstO/PECYeixlYGicd/:K0bu7SS5oYsY1UMqMZJYSN7wbstO/8f7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a6049a53532ecf812f9a67c0d8b015a_JaffaCakes118

Files

1a6049a53532ecf812f9a67c0d8b015a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE