492412faf7d31541273b0551954fe61b_JaffaCakes118 | Triage

Sharing

General

Target

492412faf7d31541273b0551954fe61b_JaffaCakes118
Size

305KB
MD5

492412faf7d31541273b0551954fe61b
SHA1

e52070a22e7ec2a08efd02e1f729fa244dae68a0
SHA256

1db1f2507a25c60490566cf36d3711f242a5c0e77dfa491923ce6682d049c196
SHA512

7d4ffda25394c3747c6e601b4724b1b2fb5a63dfb85e8badbdd9d37dc47d3a03a243f907e9714baedd36ff50cf3388f46944c8e07d8aa6dd124bc0657a65620d
SSDEEP

6144:5GSz1T72Y0SmzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOsPECYeixlYGic2:5Gq57SShYsY1UMqMZJYSN7wbstOs8fvw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
492412faf7d31541273b0551954fe61b_JaffaCakes118

Files

492412faf7d31541273b0551954fe61b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE