a348dcf9f1fc3ff6c1f6cf5373b29db9_JaffaCakes118 | Triage

Sharing

General

Target

a348dcf9f1fc3ff6c1f6cf5373b29db9_JaffaCakes118
Size

299KB
MD5

a348dcf9f1fc3ff6c1f6cf5373b29db9
SHA1

7c03f1c9d4eebb60c11bdc1f71d058d500108392
SHA256

8748c8f5e50a4daff04d664a7127c72249372acad5671eeb0d3653d19499443b
SHA512

dc25ecad543416cfa75f7d945ce2bd08c786610416f6a4f8bfb7f67e10d084972fe1668b3fd98c2b21f69bb6b3b6d8f304743cc4bc242574afc7d8e513b46730
SSDEEP

6144:67y2d4AP9fBGXia0I6AUDgCP2r30knlBcB+f8a+l85hQh:679eAOyaurDM0q5O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a348dcf9f1fc3ff6c1f6cf5373b29db9_JaffaCakes118

Files

a348dcf9f1fc3ff6c1f6cf5373b29db9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE