223b4a4dfab81eca6b9e3f2850c8a20a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

223b4a4dfab81eca6b9e3f2850c8a20a_JaffaCakes118
Size

16KB
MD5

223b4a4dfab81eca6b9e3f2850c8a20a
SHA1

a50c1624190245c93d44ef75af234b2d10fa48ff
SHA256

46aacb89f43a4b8bb1b0e2e2d5df577280858ca91ec7814727ad2afc5659c9ec
SHA512

f5ff255907b73a89ce669c3af72e05ce2f6f2cee01debca91f9ce1efdf1e96284c9be1a1efabce0f2e90b94b9131d14b5b9a34973287da3b0e98337d15e71779
SSDEEP

384:BHzpD1h21odEty4nNm5jojNRf4iq7tT+37cS5hN0wYCU9jNvqEmlgVRA:BTpD1h24Ety4JMiqpTo7cWjU9jNCyA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
223b4a4dfab81eca6b9e3f2850c8a20a_JaffaCakes118

Files

223b4a4dfab81eca6b9e3f2850c8a20a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 701KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.conc
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cona
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.conb
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eeee
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ