c160e01c11c13b624dfbc8c73b77fe66_JaffaCakes118 | Triage

Sharing

General

Target

c160e01c11c13b624dfbc8c73b77fe66_JaffaCakes118
Size

694KB
MD5

c160e01c11c13b624dfbc8c73b77fe66
SHA1

a970d3a90eb8b1fb5464861b989194d1ab1e836d
SHA256

5450204f0398dbb58593c06cabe1b4f701c2497e774b2f1b07647c1a27186cd7
SHA512

08074afc4d6a9f3847746267b6ea364fe67b5c1691e297c14156bad47ba4161c38a53d6c1c377fa7bddd9f86349d397bb153c0436e5f045fc4a0b169ea6e5df1
SSDEEP

12288:WSzy9G8iPK1eTOpVUnto2UwBRXjIj35HCHgesX8Gy/:WSzFKUTOpVjx2RQHRsF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c160e01c11c13b624dfbc8c73b77fe66_JaffaCakes118

Files

c160e01c11c13b624dfbc8c73b77fe66_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ