a9010d3be8d52fcc648a3e2e55700ccb_JaffaCakes118 | Triage

Sharing

General

Target

a9010d3be8d52fcc648a3e2e55700ccb_JaffaCakes118
Size

17KB
MD5

a9010d3be8d52fcc648a3e2e55700ccb
SHA1

411db9dd300c456a7b7b018b87e53ca037883e19
SHA256

95d924ea1564325ec45d5c3d4e772d0b7813276dfb48301e592ec57c47b9de79
SHA512

a91e5853dfd4aa741c68daeb162b90e1907143d85df575e362420e2454304c064a78bac5315688602d2ea04cd591f95e5fc39217d2b5eb80ecfd8a54fd7ae3d0
SSDEEP

192:WmfauLuSweOcM9ILSKlLwM92ID6+f8O6YTRinDLAoQCED:VfauoeOc/eKlsM92qf8XYTRivAoMD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9010d3be8d52fcc648a3e2e55700ccb_JaffaCakes118

Files

a9010d3be8d52fcc648a3e2e55700ccb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 120KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE