a442c1b1eebf321f3b02ba1219e5b6ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a442c1b1eebf321f3b02ba1219e5b6ec_JaffaCakes118
Size

389KB
MD5

a442c1b1eebf321f3b02ba1219e5b6ec
SHA1

643042498633460e0ccbaced27fd4815efa37b4b
SHA256

11aa388f4bc45bcc1c93522854a0229c5250c8aecbd2746bca952765951d7584
SHA512

b2e344cd1b0eb01c00619babbf7e9992969c7874cf0bf2e49e13fe6d58c542f32830bb20cac9a71dd8163b18dec1205dc62959d6d189326b2277b2f7949fdc3a
SSDEEP

6144:bjQVf7Np3KYD85/KMU4sxMQMTE53oEhrOi8Wx+HZ4J:IDDUKMU4AMQn53x9xx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a442c1b1eebf321f3b02ba1219e5b6ec_JaffaCakes118

Files

a442c1b1eebf321f3b02ba1219e5b6ec_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 312KB - Virtual size: 744KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 72KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE