2579c6f73deb52e1e0d70860faa8aa52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2579c6f73deb52e1e0d70860faa8aa52_JaffaCakes118
Size

23KB
MD5

2579c6f73deb52e1e0d70860faa8aa52
SHA1

c9e8422089ab6d0330ece9cab9358ae358458729
SHA256

749f16885c63d5597ed057362a9b5839b55ac56d21e5d534395e8e6a93f8c456
SHA512

bfd97640e057d7979c68e5beb9318bdedc9830453f3490867a49ba52a8e11a48f12a53b8b90ed76839ec897a890e147b1b41f0159879955838bff1f8587e244e
SSDEEP

384:yMkAKzxbJ0juxiexzGuhx7Jd4U4PqXSVUf9k2a43ENCq0go7btbeZU:yt1WsFJJ9k2aR0/4K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2579c6f73deb52e1e0d70860faa8aa52_JaffaCakes118

Files

2579c6f73deb52e1e0d70860faa8aa52_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31.9MB - Virtual size: 31.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ