63db385a310a575dbe0b980732ce8d08_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63db385a310a575dbe0b980732ce8d08_JaffaCakes118
Size

131KB
MD5

63db385a310a575dbe0b980732ce8d08
SHA1

18b682058ffc3e59074fa4ae5e4d7351364fb50f
SHA256

e39d6b1ab1374a576cf1f7bcb46a2190654097807226cf9b233aff9e00a9ffa8
SHA512

8575c2c323032f8b22ad87e9ea8d14993f316be31c1623834684fd7110ce8a1acd95e93981dbbddb13eb44f226433d0301c56472314ed941559982da3f077f45
SSDEEP

3072:kpJz2c5bVEBJiuQ09Wc5pglDBoKv5qQAgRJ4V:WJz20JEBvQ0152lNAQrRJ4V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63db385a310a575dbe0b980732ce8d08_JaffaCakes118

Files

63db385a310a575dbe0b980732ce8d08_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE