32e62559e590d516748439a99b2619d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32e62559e590d516748439a99b2619d8_JaffaCakes118
Size

371KB
MD5

32e62559e590d516748439a99b2619d8
SHA1

60a3640dc644f8931b14c8c7d8c2413a4acd043a
SHA256

9ca2ee4310f272410aa9c1442d1427ed4a495173882608e43dcdb8e1bf152116
SHA512

2f26ff039311724848f20158aa9046ced0b48accd834368a2fd51e8a15806f57738ad9b3b4daa0cd215a7aedfb892932c2a64d915fc5453deaeafaeba08574a9
SSDEEP

6144:kmjfIAUsHdFI5zN4bH/StlT4by/vCOHR83B2YvoN0MCMgx/o2VEqBu/STStU0t/6:lQ/r5AStl+jOHRk2YQN0gfqB2Se20t/6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32e62559e590d516748439a99b2619d8_JaffaCakes118

Files

32e62559e590d516748439a99b2619d8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 414KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ