b520fd882f66e7b0497e5d2ff657b48b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b520fd882f66e7b0497e5d2ff657b48b_JaffaCakes118
Size

2.8MB
MD5

b520fd882f66e7b0497e5d2ff657b48b
SHA1

b6096b52e55f4afaa3a181b5321b4adfe9330ad2
SHA256

c9afe55c2d97260b5e2facd88487644cc5ea70f29ad761b888dd03551d1dc0b2
SHA512

1ddb93e5147e5f0d08445c449cbc0d6606b6b11d775854fbe15d8e93ed39c1f4acdad2be2f682d6c0879ba689df062e9dabc0731030df587d8474b676ce9d839
SSDEEP

49152:1DHlPyp6jE1/8Sfov72CmSj/pL2gyIPgaStBPEBiwChHHVPlcnSebHcO9wjuS:PaUjw/8Xv69fgyIPgaXiPbPlzerNnS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b520fd882f66e7b0497e5d2ff657b48b_JaffaCakes118

Files

b520fd882f66e7b0497e5d2ff657b48b_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wextract.pdb

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.jgd
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE