848ddc720d7e2a0e6f8d2eba9418ffca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

848ddc720d7e2a0e6f8d2eba9418ffca_JaffaCakes118
Size

370KB
MD5

848ddc720d7e2a0e6f8d2eba9418ffca
SHA1

252842dac06c195b57b786af53b5091865f35b7a
SHA256

c307f8abbdff1709b1a961a074bc2ed3525452f556c30d3d2b8bd45949469a23
SHA512

9e2eac9cac779f072191ed6c620fc9fe8a9e29b1a278ef8d54e889aed06d1265cee4396b006e213efde175d095d5d1fbc104d1081782b2e1d4e1f96891093f3d
SSDEEP

6144:NaYry1s0epnCe6Mrd0BGq7AP4tz2Qu1SR6FD9CraC0X3xlUweLRHcre43gpOgJEk:RNX96M+7AQt9+SUFJKadRlUDL6kpVJEk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
848ddc720d7e2a0e6f8d2eba9418ffca_JaffaCakes118

Files

848ddc720d7e2a0e6f8d2eba9418ffca_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 413KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ