608fa48f453de88f07eca9b1cb7b2a9d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

608fa48f453de88f07eca9b1cb7b2a9d_JaffaCakes118
Size

543KB
MD5

608fa48f453de88f07eca9b1cb7b2a9d
SHA1

8d32a8f51c9ab6e1c5ed481c016da7d81ee7b27a
SHA256

11a0eacfcf34521c8a2b5cf20e807fd586767e64c4efafaa6af0024f5e05ef2d
SHA512

7c4f51ac691f4682c46f73be082d84df326cd8f8cb4a0c6ac29709810927d9a60831b5dcb863857823a214ce71cccc850fb61740e817d581d3c7031b881abcce
SSDEEP

12288:fSdRFDGNq52EpIdICtxUW5BX/+P/nOVzOsRJB6aiw7101xKHDK4UUVeXS:KXyq52EpIFP5BmnOVzOsLBz+1xKHDK49

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
608fa48f453de88f07eca9b1cb7b2a9d_JaffaCakes118

Files

608fa48f453de88f07eca9b1cb7b2a9d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ