630f0a2614583197183245bcd5292a40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

630f0a2614583197183245bcd5292a40_JaffaCakes118
Size

392KB
MD5

630f0a2614583197183245bcd5292a40
SHA1

52e5f2464e62966739d9ffdbf84a202728688dda
SHA256

2e6261e132fe63ff3ff89cb4c89ff7798d64f0cd3ea43b566feecc0cb05bb397
SHA512

acb3e8cc7b596300fefca0ecbb68675f4e674299539d23f27d0a196482af307d83d81e275d0e3d18a810a1dd18dd710260e003223d6e1617f36bdf301dc16f67
SSDEEP

6144:jpzBkIaCB8wFYjMFwLQNOhsI4LC5JB2pIsgFA4iRCrvPCi3apgbuAAcOLdhzRKEq:jI5JuIs69ioLPCnpgbzOphL9N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
630f0a2614583197183245bcd5292a40_JaffaCakes118

Files

630f0a2614583197183245bcd5292a40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textbs
Size: - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 356KB - Virtual size: 491KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ