2a543dcdf543e33d0d8c27a77f67fe3f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a543dcdf543e33d0d8c27a77f67fe3f_JaffaCakes118
Size

107KB
MD5

2a543dcdf543e33d0d8c27a77f67fe3f
SHA1

cc30c0b4722ede56075c29bbeaccb8dd3302a507
SHA256

ce3b2e4ea61da6a94c98fa598f5cfec00ef20a8aa98dd2e9f2ea715fd86b5a5e
SHA512

5c47b9a9f096210788531d90ea3ca3fb66261f99ebbdd756ce20c12fe451a0dbadf6463dcde0f1359995ac29ced71517cdec8018de5d679ce601f29c24858981
SSDEEP

3072:kvEtXvNjZB3T05oxpFBgrnkJkFL22U9BU5+:9/RZNT05oPFBgkiFLVU9K5+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a543dcdf543e33d0d8c27a77f67fe3f_JaffaCakes118

Files

2a543dcdf543e33d0d8c27a77f67fe3f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ