b95665e32ff07191a464dbedc6e34321_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b95665e32ff07191a464dbedc6e34321_JaffaCakes118
Size

5.6MB
MD5

b95665e32ff07191a464dbedc6e34321
SHA1

f6f3a6c8454bcc28bef2581790070a5258dbf9de
SHA256

f3c120e1995a6d972043d74afcdc91df4149dce62b59cb2150cee13789b587cf
SHA512

a4acbff3003c2a59f205a9e0b6de5606fb1b6abb90c64eefc33d3ea93d460e16b12e803b1126e00c35dea4bc744b3ebc5f6a5df2a2f850af28a84f4a7717f300
SSDEEP

6:idqIHVg3F+X32u05SpDKE4M5wgAS4hH/G5/0mCoiWdaaJ:ev1GSGyUS4pG5cmfaaJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b95665e32ff07191a464dbedc6e34321_JaffaCakes118

Files

b95665e32ff07191a464dbedc6e34321_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ