a1caf9f51961e66dc105fb3947a2e5a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1caf9f51961e66dc105fb3947a2e5a2_JaffaCakes118
Size

307KB
MD5

a1caf9f51961e66dc105fb3947a2e5a2
SHA1

4f8c6b7e0f3b8995415f2e3097798ee25d8bf1aa
SHA256

9089f3459568c5a48b42092c1f0aab1a55a1150ad41c359cc0f9e66b46ae35ae
SHA512

d2137fb6fda27e0abff9a76964c15e72e53128e4d759a2391678cedb4fa7259e9c9f23601d58f5b51923325c26437e990eae13f28ede834353395bc779cbc178
SSDEEP

6144:K0vzhT72Y0StzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOBPECYeixlYGicV:K0bd7SSEYsY1UMqMZJYSN7wbstOB8fvD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1caf9f51961e66dc105fb3947a2e5a2_JaffaCakes118

Files

a1caf9f51961e66dc105fb3947a2e5a2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE