286be0ed1f0366b39d003c5d69f0ae7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

286be0ed1f0366b39d003c5d69f0ae7c_JaffaCakes118
Size

150KB
MD5

286be0ed1f0366b39d003c5d69f0ae7c
SHA1

cddfcca6faaf2c0a745f17cb0a786fff7db1e9ca
SHA256

ca93ff7dd116be287354840f5549259cba2d1d77f7bbc9576c06dec5f5df2eef
SHA512

f5abb8686c05d71991758fe571b4178514e800fb93821b55a05112215b30e8c8d19115a8754cb0e2bd0062f6da8f6508b27c4e20e66c35dacdbc5cf49dddcf9f
SSDEEP

3072:ncu6l6anf8XUONX7xWBhkajiI6YsS4F0/ObQ20qKrUiUS9Ao:VTcf6dWNf6Y14mOb8q8hmo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
286be0ed1f0366b39d003c5d69f0ae7c_JaffaCakes118

Files

286be0ed1f0366b39d003c5d69f0ae7c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE