a80684e139076df48a1c26a4b36b0b78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a80684e139076df48a1c26a4b36b0b78_JaffaCakes118
Size

129KB
MD5

a80684e139076df48a1c26a4b36b0b78
SHA1

b3fc1eeac90cdf5b96595f4b604ddfc1c5a9a9ca
SHA256

caa7073911826dfdff7b3910c258d856b034124c8a8c972d755af72bf3e51e2d
SHA512

eb5cb0c072da39d05f0e97b2a7d309b35428bcfdc326d7669eb5795aa0985b5c1025524b64035a01d1cf224667f4d8b2bba526b176e783f6eafd09ef96ab310d
SSDEEP

1536:UUBiFqtXmPmgC9MjcWSLNgNt3UdO51x/GPQ04H7m/cZBQ/wZz3JvfbYubR4CcETr:UOn16mg2OMWjUcx+PQ0E7mw3vzbbSoI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a80684e139076df48a1c26a4b36b0b78_JaffaCakes118

Files

a80684e139076df48a1c26a4b36b0b78_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE