aa4249da61f9c0bcf72419b8145e2cd7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa4249da61f9c0bcf72419b8145e2cd7_JaffaCakes118
Size

307KB
MD5

aa4249da61f9c0bcf72419b8145e2cd7
SHA1

76653c5dd4c5ca4b63bc78fb539cc835341262fe
SHA256

ff72e6ea34ab836b205e0a5bd6682b03c5a3e0e727019c42ac6e9f8f9c9a688d
SHA512

f4db813e8ee682da0c57eb2d712449aeba55cf84d91c9f6b1bbfb1fc9a02b21cc735aaa565afaf5e3f16f386acaf6935a9054665c391ba7c5121fbc493856550
SSDEEP

6144:bqzrT72Y0S0zinYKTY1SQshfRPVQe1MZkIYSccr7wbstOGPECYeixlYGicnvn:bC/7SSnYsY1UMqMZJYSN7wbstOG8fveI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa4249da61f9c0bcf72419b8145e2cd7_JaffaCakes118

Files

aa4249da61f9c0bcf72419b8145e2cd7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE