a6aa540eb54afdfc822a01043c509280_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6aa540eb54afdfc822a01043c509280_JaffaCakes118
Size

5KB
MD5

a6aa540eb54afdfc822a01043c509280
SHA1

2faf2b2eeddbfa86723b58c84f3985be0d00f357
SHA256

17ee41fc6c1863444b68e1e4b13dd789ca861b3b54319c52aacb471e72333725
SHA512

df89628a7fc580928a5384ec89583dd9d833466e68781cea74280cc5436f758bdc2b1f7da2e25a98b510f3732ccd3dd3e1cc1f2d0d4cf1dc3d00bac398574bfb
SSDEEP

96:f8/9ztjxuNGMcfdWMA+K2/oUZnXQY2l6MftUweujAMbKhbvU5IV+aFfJl8c:0VzBzMyWh+LZIP+wJAM2hbkaJJl8c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6aa540eb54afdfc822a01043c509280_JaffaCakes118

Files

a6aa540eb54afdfc822a01043c509280_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ