93e2c3fc420233a49aecbccb40827fe4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93e2c3fc420233a49aecbccb40827fe4_JaffaCakes118
Size

587KB
MD5

93e2c3fc420233a49aecbccb40827fe4
SHA1

2839aa1ba270f8f6540025183d188df84d4ea396
SHA256

cc6c536b591e7e77d4a5a860a1bbe3544ad9233df75aab7c6addaeecf03acbf0
SHA512

6ba44f12b2ceaec7db23eaf6b23ee1b21e9a1e2fbea50d4e8e8da06a46b85de6eab99ce3c7b1a41ca51f7e19d751763db0a57e8eceeceb03163ed798d2fd1f7c
SSDEEP

12288:mR0lk1svoOuZTG/2ceTreervgjRAVLKNxkqziaIj66Q1:zpo7KxYtvVV2bkqzi366O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93e2c3fc420233a49aecbccb40827fe4_JaffaCakes118

Files

93e2c3fc420233a49aecbccb40827fe4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

@@Server@Finalize
@@Server@Initialize
_Form1
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 481KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ