32db9544bea1f2b9c8cedfc6072458b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32db9544bea1f2b9c8cedfc6072458b6_JaffaCakes118
Size

313KB
MD5

32db9544bea1f2b9c8cedfc6072458b6
SHA1

e91d0655794bd41ebefc6e3ee4b35d56b6cd1a5b
SHA256

73feac26434c883e045f7a87bb62d6f4daf2d83212ea885a9a3292e921239ea2
SHA512

08c2dc620de34a48dd3cb29634fe3946e99190ee32a32e5bd6881f6f331169c3d010b12cdc8c8bb4bd67544b43bd5e3657fbe2094d7a5b01d35419643dd7af7d
SSDEEP

6144:MbzuT72Y0SQzinYKTY1SQshfRPVQe1MZkIYSccr7wbstO6PECYeixlYGicl:M/67SSzYsY1UMqMZJYSN7wbstO68fvei

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32db9544bea1f2b9c8cedfc6072458b6_JaffaCakes118

Files

32db9544bea1f2b9c8cedfc6072458b6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE