aa0581f6856ac4cad8616bc67f0e6805_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa0581f6856ac4cad8616bc67f0e6805_JaffaCakes118
Size

4KB
MD5

aa0581f6856ac4cad8616bc67f0e6805
SHA1

1d2c51f68048239bf0e6c4894cd46e9b780273ed
SHA256

e0eebd659a9abd2042b920ecaa9e572a4ed782252d3159ae7059e777400ec99c
SHA512

067cf92942a7359aa31e594023c3d7c50e5266c8ebc4f63b2fea45bf17e2ab503cbba99d4a4469171d13767aab9dd8c0f726b524ec6b117dda28269bbed32008
SSDEEP

48:q0lkXgsS86cRJTypyQZCpRKPtGzIVAUx9sU0B6k8f:flkwzFWcpyQZCpRYfVx926kk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa0581f6856ac4cad8616bc67f0e6805_JaffaCakes118

Files

aa0581f6856ac4cad8616bc67f0e6805_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.data2
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ