4265a6a06ff0505dcd11fde0f32fff12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4265a6a06ff0505dcd11fde0f32fff12_JaffaCakes118
Size

1.4MB
MD5

4265a6a06ff0505dcd11fde0f32fff12
SHA1

af8ef7052b6897dd30305cc72ecf73626126edc1
SHA256

4303832121fd012a201be6d13fc6b6fb95c5cb8a3c51c735aadbf896358c61d8
SHA512

66f16fd84da963378bce7af314804ca5ff53d5b17b8e1ff1e42e5a743ad3de0491c3cfc960d0ce6cbe1d99d85962121748f85755e2f2c0b4897cb75c7cd5b2dc
SSDEEP

24576:vRZ07s5GPFASE3V9XpGO4d3rSIy1TTTTTuc/hWhFJ77:vRZ07TPFASErAc/hWB7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4265a6a06ff0505dcd11fde0f32fff12_JaffaCakes118

Files

4265a6a06ff0505dcd11fde0f32fff12_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.shield
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE