1c758f67dc904dd37bf2fd1d6b91a321_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c758f67dc904dd37bf2fd1d6b91a321_JaffaCakes118
Size

305KB
MD5

1c758f67dc904dd37bf2fd1d6b91a321
SHA1

eb1b8436fcca545928f80b80e4c44d5cf76c81a8
SHA256

eff33eeb48cc6bfba2ffff8ab1b10d931e654f11d6c7c5723806d422714badde
SHA512

e0766b8f79e29808db3f0482920e669de41e2c79a7c222754a4bf1691ca83580d5c7c8e6a17de0f6eaa36c0e74ffa115e9c97d08ad8c36ac88df82f262272f75
SSDEEP

6144:5GSzcT72Y0SnzinYKTY1SQshfRPVQe1MZkIYSccr7wbstO3PECYeixlYGica:5Gqg7SSeYsY1UMqMZJYSN7wbstO38fv8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c758f67dc904dd37bf2fd1d6b91a321_JaffaCakes118

Files

1c758f67dc904dd37bf2fd1d6b91a321_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE