ad93c201275664a68398b6d86b3cd74d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad93c201275664a68398b6d86b3cd74d_JaffaCakes118
Size

1.3MB
MD5

ad93c201275664a68398b6d86b3cd74d
SHA1

6f714431fde7324ec3856fca11e8af56a5050b01
SHA256

08147b39acf5be36feb54f5b527c717bbb0ffde32488586cb54cbd7025da2051
SHA512

f184735e8a4bbff5574aa7bde29aa6a33d9a902400263d5b9eae41d4716ded78230392cd0a2c48eb41369804d8e98dffb4356dec61ed1a2ce7916f4116d91b77
SSDEEP

24576:Fnvb+MiBtaConIoSxvMEwb+z7Pkgx4otPyh173y6+gUl+YKI8J+t3CXq:AhBtabnILxvMMvs0ZPybe6TUvK3+t3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad93c201275664a68398b6d86b3cd74d_JaffaCakes118

Files

ad93c201275664a68398b6d86b3cd74d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ