310aadc408978d9d7c246e0c1a80d646_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

310aadc408978d9d7c246e0c1a80d646_JaffaCakes118
Size

32KB
MD5

310aadc408978d9d7c246e0c1a80d646
SHA1

0a39c059538100f616dfb76b8da1cfee12cb52c5
SHA256

165087d00299be270ccf7f274a8c2b5bab446471f009f89b0a5ceedddaea203f
SHA512

091efd33d1063ca20f8d6934c570b0851fe3e56101aa5f4c1cd18b6cb696822a85c18de3507ef4af3f169c0e96bfe7bcd341fdb1047b9dde7d4c01f1306d9195
SSDEEP

384:ApptA5Zz9nZEf8ZmdohRdbStkTTxvbTI9sKc81fOPEikpBmYYNRQPHbVNUqUdX:AppSKeHbSemnc817iNYYAP3UqKX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
310aadc408978d9d7c246e0c1a80d646_JaffaCakes118

Files

310aadc408978d9d7c246e0c1a80d646_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 467KB - Virtual size: 548KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE