842d70f406338ddfee0a5f38f9880d1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

842d70f406338ddfee0a5f38f9880d1c_JaffaCakes118
Size

97KB
MD5

842d70f406338ddfee0a5f38f9880d1c
SHA1

7a4b7263102fbb10da9269523a325d261068ef8a
SHA256

ba33caf0e0246d83c08b60dffd15e04b55640c4adedc4126dff6ded7d70a792d
SHA512

b20f7cd15549dfc2a11a71575a75e83172651ae15ff9543a2009b4e5ed4ef89f8930ecf99207067bc53d14df7168a180b2950e8bc41f7a6be6e208e8bbe99b72
SSDEEP

3072:olsUMhJihtq8W3GREC8YA8b/IXozsxfQeztuwU:yMh4rTW3GRN8YA8b/IXozsxfxW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
842d70f406338ddfee0a5f38f9880d1c_JaffaCakes118

Files

842d70f406338ddfee0a5f38f9880d1c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 900KB - Virtual size: 900KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

STLPORT_
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ