1c846304bc513455fe3e31885758a900_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c846304bc513455fe3e31885758a900_JaffaCakes118
Size

5KB
MD5

1c846304bc513455fe3e31885758a900
SHA1

08ea0239fe03d5255274a91214fdd7283f90249d
SHA256

da073f43f5de203b33fb9a7475839f5db80e8b87b1db46d72e3a4c3b7850af3e
SHA512

d523086363337434d0f976d287ce3d7e5f420c911d2afe9b46349354fc189da3fbd64dd34cf9ca9c8311d374e937a25fa8e3b88e1142c56dedb15d18a9c9c59c
SSDEEP

96:Yh2QvRkIehlk7QJuB0jf/C6nqAQB14LAb:Sv6FfF66qb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c846304bc513455fe3e31885758a900_JaffaCakes118

Files

1c846304bc513455fe3e31885758a900_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ