881dbcc30977d71134e10540ab261136_JaffaCakes118 | Triage

Sharing

General

Target

881dbcc30977d71134e10540ab261136_JaffaCakes118
Size

97KB
MD5

881dbcc30977d71134e10540ab261136
SHA1

9dafd0c23ee0018e632a6d8ef86de2db4b335fde
SHA256

a7988c86c315f194c491a2acd277ddf3e9a3bed29fa649f5faa1ecf863ed5340
SHA512

0280f94da77bb96997e48af1b99c218d8e511ddaba2478170a69d26c697b661319a533e0d0d483a1ba41862a4f986d05c17e643eda8ba1f4337b9f672fd736f1
SSDEEP

1536:aXHqhhyLlJAYJXt4hibk0S+1KNGXMih7LWbtm:aqfy5t41QHWbtm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
881dbcc30977d71134e10540ab261136_JaffaCakes118

Files

881dbcc30977d71134e10540ab261136_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ