277bc57508fb3f6b6320253d3d73f588_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

277bc57508fb3f6b6320253d3d73f588_JaffaCakes118
Size

610KB
MD5

277bc57508fb3f6b6320253d3d73f588
SHA1

1353dd09529d7b6d43e193176dd7dd89e9516356
SHA256

c4aed715604fd4625d2135927da7aef5bb9a75c0a3af4f61e398b33d1b66ea3e
SHA512

690a1e6e219c9c2e7b16f6d4ccc15bc92372f8ba04a152236a977485642e6e9cf2b737c1d53399fee7d6722b294caf052946bb12c88dd927b92814cf902e5a4a
SSDEEP

12288:6xxScSoAMg8Y8RqcoRRgHKhoGUnIb22n6HtEXP3i0y9Q5six02:6xxScSonyAqDRtjUIC2n62PaExP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
277bc57508fb3f6b6320253d3d73f588_JaffaCakes118

Files

277bc57508fb3f6b6320253d3d73f588_JaffaCakes118
.exe windows:16493 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

�f�}(k�
Size: 3820.2MB - Virtual size: 2287.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��*S.�$
Size: 768.1MB - Virtual size: 1263.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�]pץt
Size: 1290.5MB - Virtual size: 2085.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

��Ѭ�M[
Size: 1246.8MB - Virtual size: 1125.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

�S��^��
Size: 1378.8MB - Virtual size: 1593.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE