b67c9cbef89414ad17948105aba7c949_JaffaCakes118 | Triage

Sharing

General

Target

b67c9cbef89414ad17948105aba7c949_JaffaCakes118
Size

280KB
MD5

b67c9cbef89414ad17948105aba7c949
SHA1

bb642e70f65260ebed4254e82dae1626b9563cca
SHA256

9b534972b9b73e3e809be2a891e9e8c3ee4d35edfb38f907531152574e3bd07b
SHA512

899f9353a441e7c372898b12f578cc32b491be4c0feaae37dc8cb40c3da482750367225ffc1c5d1c6b2a4661713f4dc936eeec019b4255ca39f837f320202d8d
SSDEEP

3072:wZVB2B8cgi7UiQbL83qBBuyAlHzwT8Nakn8+pkQka4nQqPcrV2r:wkUiQdfTAnNX8+O4qPcrV2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b67c9cbef89414ad17948105aba7c949_JaffaCakes118

Files

b67c9cbef89414ad17948105aba7c949_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

SPReview.pdb

Sections

.text
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ