466cca3d24a8615af3268a94953be759_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

466cca3d24a8615af3268a94953be759_JaffaCakes118
Size

788KB
MD5

466cca3d24a8615af3268a94953be759
SHA1

a728e6be09507f11e107a0c7133c73cf06db3193
SHA256

d95732268704963d643a9e5f9f1693e1d06f8b86ec0f8da229cee6c12756be05
SHA512

0236bbe0f0967d7e5671f559658691a2378c1fa57e089995aa429506c85fbe97f5271d41e0e8475ddd20a75ca801f93d806cfa9a438b5783e8199b88878154c3
SSDEEP

24576:R7uR3PChx7DqOFBFgD/OIyWJ6SRUwOsozRhT:RU2/B6ag1RU2g3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
466cca3d24a8615af3268a94953be759_JaffaCakes118

Files

466cca3d24a8615af3268a94953be759_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 782KB - Virtual size: 784KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 150B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ