ab8e0478c418c13df000a7fada7703f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab8e0478c418c13df000a7fada7703f4_JaffaCakes118
Size

4.8MB
MD5

ab8e0478c418c13df000a7fada7703f4
SHA1

ed8025a602a59e71458510bd1767c48cca1aa8fe
SHA256

a9734f4489613411f72f36ae95f8ab98a68dedffbc89423f463460c618c42548
SHA512

69b6b5dd2793d04766e466fc2fec75215ba4a4d84c510bd2734ac645f0ad446c7dc4f5ce90caf19546286da68bdb225c8f2e6d83363a934c672fed1e151f6dfb
SSDEEP

49152:0FWDIvH2EHMN4SK8HDIYkasDUisMrCPGjsNn9f8WAJZKLHQMDaLN0LbUq25YmJjf:04MH2EiICsDUWrCPGobIaLHQzQUq25/F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab8e0478c418c13df000a7fada7703f4_JaffaCakes118

Files

ab8e0478c418c13df000a7fada7703f4_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 242KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ