a1563180996b0f901067990d9f10cb0f_JaffaCakes118 | Triage

Sharing

General

Target

a1563180996b0f901067990d9f10cb0f_JaffaCakes118
Size

315KB
MD5

a1563180996b0f901067990d9f10cb0f
SHA1

7ed5f84140e44d73c1b3af1ceb47433e790e2f75
SHA256

46ce8ca78189ed5353c5afed25466c723c7501de5358e87956df0807dda59081
SHA512

abb491e4b7280687efe33bbaffe330137b9f826086232513f6a4fe8467bb643b02cd4f10e904826e3dee6015f323106a345636bdec62b748003521158f0098ea
SSDEEP

6144:Hq3gCTPoqWYHtSsYnI+tnYDcMbY4FmNzNwm+MhUafxO1BcC1cr:Hq3Jz1NCnI+1Kb5KzNVNwPcnr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1563180996b0f901067990d9f10cb0f_JaffaCakes118

Files

a1563180996b0f901067990d9f10cb0f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE