a3a6d7e8f1a431a54a4838c1fd8b9312_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3a6d7e8f1a431a54a4838c1fd8b9312_JaffaCakes118
Size

433KB
MD5

a3a6d7e8f1a431a54a4838c1fd8b9312
SHA1

999da1a72f57af74b152ef93a0fe9816d7841025
SHA256

515c9e1a2131cea6a9f0fce30e07db473a66ef914ea5b381b3f31defaa872851
SHA512

e25231bf8be7cabe75edcf66893704ab8971e7682a68ef402bdb212f9f00137a78d989a43ebcf0ef412311e1c57b67702706ab76de2c90adeeb60fff7bd3dbd7
SSDEEP

12288:GyaZ+le8/VJ6BV+rLxk9luif97Iv1D383o6AQbw4b:Gyo+lemA6Bif97E1+BAQ0I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3a6d7e8f1a431a54a4838c1fd8b9312_JaffaCakes118

Files

a3a6d7e8f1a431a54a4838c1fd8b9312_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

napstat.pdb

Sections

.text
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ifc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE