290f2d31f1068a17913642ca18fbdb89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

290f2d31f1068a17913642ca18fbdb89_JaffaCakes118
Size

282KB
MD5

290f2d31f1068a17913642ca18fbdb89
SHA1

5066561eea90a8f2592ba2fdd660fd3cb9e3d780
SHA256

6bfaab56dce74a720ce5cf8ea906c48759fd1f4bbf3856212a379a575e373566
SHA512

b99335225a6be728e2b6af2636fb19b36bd8b5f43353cff54dca51f55b62e3d9f824852f547259f832d74e2d383c05435cb5b2b7dd7fa6d0d1e60eaa960cc410
SSDEEP

6144:nPRU3IQByQAEhy/6UiIMyp8HKmHxEKRqWkMtFs7Pipqy8R9:n5U3IUpU/6U1MyUbHN9kME7hX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
290f2d31f1068a17913642ca18fbdb89_JaffaCakes118

Files

290f2d31f1068a17913642ca18fbdb89_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 259KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE