626d0b62a686beafc96c15df0512c422_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

626d0b62a686beafc96c15df0512c422_JaffaCakes118
Size

143KB
MD5

626d0b62a686beafc96c15df0512c422
SHA1

c954769f5856b0904b14bb2ca36333f157d33dba
SHA256

583b565cb254f7822e09ae92a7d213c19e09a7a39e53295df0ee6a2246cbad29
SHA512

c0cf05e62f4f2be2097977de8bedabf7354d117086b1ac4457081accdccf5a45d48c7f57061d6ae0c176767742cf47cc83a2c2552be8bfeadf4060a58ad3838d
SSDEEP

3072:nQfjFH//DWr8fykm1ykxhjiUtkyV0t/Yx0vU4WNyGycfcun9OYSh:QfjZ//ir8fykm1ykxhe60QAUibuSh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
626d0b62a686beafc96c15df0512c422_JaffaCakes118

Files

626d0b62a686beafc96c15df0512c422_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ