2843057142f7e7169041f37d6d1197d9_JaffaCakes118 | Triage

Sharing

General

Target

2843057142f7e7169041f37d6d1197d9_JaffaCakes118
Size

318KB
MD5

2843057142f7e7169041f37d6d1197d9
SHA1

7f0f659358eb3e1d3d1277d56eb5e2b909ed5944
SHA256

1aeb3365e48d5cb8485b2b26dd8184fae03c7acdd4fa68ec1c2f519c1d3cd75d
SHA512

a9afb78194724ebc93cd516a506c3406f11e2795e203d183f5402fe380c99d47d10010f7b0024316c57885622e1fe2b589809da49e7c03417073f056f299b12e
SSDEEP

6144:s2euHlSJwogF/bIRGavBk6gOvAufpoS/wvjyD4inl8q:pHlSJwo6s/pk6g4AufpXw04ilV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2843057142f7e7169041f37d6d1197d9_JaffaCakes118

Files

2843057142f7e7169041f37d6d1197d9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 528KB - Virtual size: 527KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 437KB - Virtual size: 437KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ