aa57ec0a0516c9b17b3ed15ef8825da2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa57ec0a0516c9b17b3ed15ef8825da2_JaffaCakes118
Size

224KB
MD5

aa57ec0a0516c9b17b3ed15ef8825da2
SHA1

d145d46e286b9af875c8cb60cc42422fc565efa9
SHA256

e4222d9b9ea92a983e6786bf3fb32b32f7bf12a7159794073f92115e842833f7
SHA512

8c2bd3754c0aff9700007cb4cba2eb40116a519c0a4e6599b91481c70ce08227ee187bfd69de53becb8d91d72182fe1b0c9f3abd74b3b1d749b865aea1c13569
SSDEEP

3072:Pkvzk24oH7KIuPqzydiBhYQ6Q64AYuS88EyNOZ4/MfmirVtw6hIBI2n:Pkw24oHqPGywWQySGq/BStVq7n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa57ec0a0516c9b17b3ed15ef8825da2_JaffaCakes118

Files

aa57ec0a0516c9b17b3ed15ef8825da2_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

RRInstaller.pdb

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE