b17456b1f382f473d707a660cfe518b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b17456b1f382f473d707a660cfe518b0_JaffaCakes118
Size

158KB
MD5

b17456b1f382f473d707a660cfe518b0
SHA1

b011444ce038e67fd12c9678fe40ff97e3c3511f
SHA256

1a74524d996fdf6f1beb8895d09a79e080f48d8464f3ea7d3604c851d84e6266
SHA512

49335111a9ff6e63ceb4850506161f2a9f15478d3686924c4d45d0614a626766d39da75e6656cc3916be3c9670e39603a1f7404eca181bba0df7189997ff198b
SSDEEP

3072:64i36S4+kYNrI5CpuC2gnFPW5pzRbiyt1l66wlKrnmySE2l33fPoD:6tR4+kYNH5FP4Fiyt1lTfCHfP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b17456b1f382f473d707a660cfe518b0_JaffaCakes118

Files

b17456b1f382f473d707a660cfe518b0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE