a57ca958ca040a318096858ca1898aca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a57ca958ca040a318096858ca1898aca_JaffaCakes118
Size

54KB
MD5

a57ca958ca040a318096858ca1898aca
SHA1

272eb42284d5f0093e0b6f81d1e67ed3ed113d97
SHA256

167d559d6c7423df99dbbe7d9b756353fe85404bc8b25e3f261afb4854c80354
SHA512

6f0d8a6adb80af01a0a299ba8b1b29d6275fc9fe4ea15313c19c5dd88f47f1f665797899fddafb252ca774a59dd1e6906e172b26f5ae96791519b14b21b7ed9d
SSDEEP

1536:xVL4rBBKsJBk9px3rVrNyvg9ZPc1LBc7+CR:rUSJv3rVrNyvgT0Vc7+CR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a57ca958ca040a318096858ca1898aca_JaffaCakes118

Files

a57ca958ca040a318096858ca1898aca_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 658KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ