949369f1b4eb579b73585ce063c25c66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

949369f1b4eb579b73585ce063c25c66_JaffaCakes118
Size

315KB
MD5

949369f1b4eb579b73585ce063c25c66
SHA1

072606c7bc32995cc6c2c3bd9f7284aa5756da12
SHA256

7e2297187438eaa97389fa1872223a303da21920a029cf0d4dc2180b5b32077d
SHA512

861a2a7a62bdf4cf00929ade59b72152cb1885c715d6e4f1b565134d2840330fca8115f8b329c2ff452c403202e08af3dde2ca6e3f888d53f941318d7e0161e8
SSDEEP

6144:Hq3gCGxoqWYHtSQfYnI+tnYDcMbY4FmNzNwm+MhUazxO1BcC1cD:Hq3Yz1NSnI+1Kb5KzNVN0PcnD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
949369f1b4eb579b73585ce063c25c66_JaffaCakes118

Files

949369f1b4eb579b73585ce063c25c66_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE