ac8e3c22958b266f97255516fb080eeb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac8e3c22958b266f97255516fb080eeb_JaffaCakes118
Size

115KB
MD5

ac8e3c22958b266f97255516fb080eeb
SHA1

423ab0ff77129a2ff06ac1c861823aa14e1b774f
SHA256

e29302139c5750d95df64cf5d50411443a25e93f23ced0026116f1042e5effdc
SHA512

4c37c4a2dcec493bb735ee40d0321522ff86240d8ebd0f40cd257cc3bc7d7a86eac96e87f2783e526d767c58141117da7e3868aef6f79d88d22484200295e434
SSDEEP

3072:aYYV+Py5nP/C9y0XT+XS+SqcZxMgmEUedFWZowNWiR9:LdISD6XS+pliFkHzR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac8e3c22958b266f97255516fb080eeb_JaffaCakes118

Files

ac8e3c22958b266f97255516fb080eeb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE