a11ac72838e3f3f5d2695742b9da7ac5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a11ac72838e3f3f5d2695742b9da7ac5_JaffaCakes118
Size

498KB
MD5

a11ac72838e3f3f5d2695742b9da7ac5
SHA1

c4ee6c50057427524d930b356e00de3fb6e31108
SHA256

549022ffbee267ab1ebe55346b4fd65a8c6fd4591b34b35d428ef965cdedccad
SHA512

1a34da5cc575776039edb70f1ecd298b7c298d5b59b41f2773c488fc915b81c068d7023eb356b956e3f8825dd2ae209b694e9c87cc370629b282b24a05dbd578
SSDEEP

12288:NSo6xg5kN530xuooqMVwsg0VwsgS0Tyv9H7eu7lB:t6u5030x+gmgS0TyvNJlB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a11ac72838e3f3f5d2695742b9da7ac5_JaffaCakes118

Files

a11ac72838e3f3f5d2695742b9da7ac5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 336KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 201KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45B - Virtual size: 45B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.sdata
Size: 279KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kzowtlo
Size: 4KB - Virtual size: 76KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE