a7d3abf788352bec4bb945cfcc56d756_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7d3abf788352bec4bb945cfcc56d756_JaffaCakes118
Size

307KB
MD5

a7d3abf788352bec4bb945cfcc56d756
SHA1

735dbdc3b13cb72d8c685b2b7045cbc61743ee5d
SHA256

1d6f19ca53dba5822b773de6b77b83936d2f5bedfdbe8092254d40a17444a61b
SHA512

94e801e4526a302f2e38a2afb58206fcb0f9831dfb129588ee64478f20e92135cf0b25bd99a909c20dcc8b4924a8ae9d5d67cdf1ffe142ce5de9c40bd39e77f3
SSDEEP

6144:K0vzlT72Y0SDzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOrPECYeixlYGic/:K0bJ7SSKYsY1UMqMZJYSN7wbstOr8fvN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7d3abf788352bec4bb945cfcc56d756_JaffaCakes118

Files

a7d3abf788352bec4bb945cfcc56d756_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE