af0cd9f4b36f12ddf3e713a09b209f64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af0cd9f4b36f12ddf3e713a09b209f64_JaffaCakes118
Size

315KB
MD5

af0cd9f4b36f12ddf3e713a09b209f64
SHA1

17bd89bd5bc16ef5f3dd8624bae78a427fd2846c
SHA256

ac7d1cc17feba92d62ffc634c450df3a19e401276d66f667b2895bf499fdf593
SHA512

dbd80d1e5aab2fce6b1869c5c95d9963e30cf5301535b1bc953894a0fe1954d23a9b09f3d43db4df7d0337f161aa64c66f6a23996078189f7f4c3501774a97ec
SSDEEP

6144:Hq3gCjgoqWYHtS4YnI+tnYDcMbY4FmNzNwm+MhUa3xO1BcC1cB:Hq36z1NSnI+1Kb5KzNVNoPcnB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af0cd9f4b36f12ddf3e713a09b209f64_JaffaCakes118

Files

af0cd9f4b36f12ddf3e713a09b209f64_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE