b68c6bd387a2bcdb823d0ea0f626d639_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b68c6bd387a2bcdb823d0ea0f626d639_JaffaCakes118
Size

1.6MB
MD5

b68c6bd387a2bcdb823d0ea0f626d639
SHA1

14b52b61ebe1382a882964b53c73d55125c95ee4
SHA256

2cae39eee09a2f4562939034a1e06cc1d5bc21ca297944c75daaa89870b9896a
SHA512

182d8b641850d45f8d667d2fa6ec1c114f0751291566d43d3c5e043a0a0503198dcca527489d70708e98848a0aaade55659e35ad7c2aad43fbe4060c53ec8a8f
SSDEEP

49152:s/TP/wHPAn1SsrHq2dgsjSqbgNxCmC5B9Y+lCsPPAAgc3e/oBGejmIMG:s/TAPAn1SWqmZSqbgNxCmC5B9DMsPoAB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b68c6bd387a2bcdb823d0ea0f626d639_JaffaCakes118

Files

b68c6bd387a2bcdb823d0ea0f626d639_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ