899a59799a5e31e11986b7b2dbdb21bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

899a59799a5e31e11986b7b2dbdb21bd_JaffaCakes118
Size

512KB
MD5

899a59799a5e31e11986b7b2dbdb21bd
SHA1

4d987a1e39fbf1099c16d5b4c10631a0ce45f5ac
SHA256

5ec288a9cc914c8d29ce5af0a0fa6ea17bfecbbaeb450688b73a33a15ab29364
SHA512

d358ef06589df00694e441d791fa8b05299870520189db732e47629f96388509c21ef7c0a7f6b0b1655dbb50b4be38e181825ce9926a3cdfadaa7862be8cae69
SSDEEP

12288:INZA9QryJOAhFqOdv3OeAau8Kuv8I6qjd:8mQ+ZhFX9gadwS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
899a59799a5e31e11986b7b2dbdb21bd_JaffaCakes118

Files

899a59799a5e31e11986b7b2dbdb21bd_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ