c067c6f3f605920d8e9389a6928cc0f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c067c6f3f605920d8e9389a6928cc0f2_JaffaCakes118
Size

153KB
MD5

c067c6f3f605920d8e9389a6928cc0f2
SHA1

27e2e1b973f61c8fffe0866015ad982ffb08a073
SHA256

0163c1465de422560e4f371a997eae4451b86456bbdf07c02a85aa72acaefa4a
SHA512

74b86cdf114b7e268d6a633b50dcdb90b4d592061b86f446dc4f2eb97fbdf3e720b8099623955fa4b15f9996e491fdd599a44713b8af2d5dbba162a732310437
SSDEEP

3072:d2jpmyvLmkZ6ODD4BF6lVpib2tUyvg7ihPbZ1T3KrUi/xvVM5J:Y54AMF6jU0Uyvg70b3r8j0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c067c6f3f605920d8e9389a6928cc0f2_JaffaCakes118

Files

c067c6f3f605920d8e9389a6928cc0f2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE