72e32340c97ba6a6e0b3217f8371b292_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72e32340c97ba6a6e0b3217f8371b292_JaffaCakes118
Size

989KB
MD5

72e32340c97ba6a6e0b3217f8371b292
SHA1

ce75330b5ea327e40b948465373dd39169c897e0
SHA256

35120de4c26ca3c08362dc6e2117b3486019bf691e5680cf4cc6927c51425d8e
SHA512

1ab355d27a776e3707d92523ff6f13dea07842f232e795214929c41024182812d872ecc7d28dda9ab150f0b7daf5433da7066f99c11235f3fc2c957aafc497c4
SSDEEP

24576:cKRa+dPY1LLN7sIBQzQjfUnlc3fi83RKEkr:cKRa+dwB57sIpQlc3f9Rqr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72e32340c97ba6a6e0b3217f8371b292_JaffaCakes118

Files

72e32340c97ba6a6e0b3217f8371b292_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

swSec_CheckInLic
swSec_CheckOutLic
swSec_Initialize

Sections

.text
Size: 644KB - Virtual size: 643KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 685KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pmj
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE