418e89ded2b3e70edebc86ba8b8286cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

418e89ded2b3e70edebc86ba8b8286cd_JaffaCakes118
Size

284KB
MD5

418e89ded2b3e70edebc86ba8b8286cd
SHA1

98d8fdfb6eab8c0a4cf8690ec25e60f5eaa81f87
SHA256

1669cd5aa28b62d271af3b84bc7427c614f2a1f6ae25b8d424c347b8be8a446f
SHA512

bc1de33d669a1d9a407d5a33c89d50f653c9ebc58b72dc8f3837cacfb3a5d1fe1de4f3e9722a8169f19feebd2258da8d1e665b388afe180de0aea97fc32cc54a
SSDEEP

6144:f6cPpODxCdS7eOUQ41OYd4sB1xYTvCV+CP7j8hIK3on9Kqo:fVcCxSKCTvCVL7gmOonk3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
418e89ded2b3e70edebc86ba8b8286cd_JaffaCakes118

Files

418e89ded2b3e70edebc86ba8b8286cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 272KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 146B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ