217a5b7b983632fcb0390b2bd81f3ebc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

217a5b7b983632fcb0390b2bd81f3ebc_JaffaCakes118
Size

420KB
MD5

217a5b7b983632fcb0390b2bd81f3ebc
SHA1

1b467ad7dbecea4faa7ef2b61bc9f17f61204371
SHA256

6ed1e2066a9b8246a2be4aabbd5b761f98856d978bc7d9ddb1fae8d8cd5b3223
SHA512

66a78efd7d0888ed36e67eb2a0e9aafdae0fffe458f00dbd98c1537c8648e01fca32f580da2fd1ac7ad5be0dc9a4d4d99e67d7aadf5d6853b5deba7b9ec99b97
SSDEEP

12288:76DNoVyxH8R2qkBM9rPwFRiMoa2U2y5vTSssrILIs7W:uDNoVDUqkBM9EFRfoBPyV8rxs7W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
217a5b7b983632fcb0390b2bd81f3ebc_JaffaCakes118

Files

217a5b7b983632fcb0390b2bd81f3ebc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 431KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ