c18a24e29e4752ce04c1484e1613b3d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c18a24e29e4752ce04c1484e1613b3d0_JaffaCakes118
Size

516KB
MD5

c18a24e29e4752ce04c1484e1613b3d0
SHA1

a2dc6b3007b3cf2bb048a6e03988e172bf74d397
SHA256

2ac2ad800a9e860d1cda51ca261facd30170f9c3eb342eb9bb69489b271c7630
SHA512

a29ef989ff7aa38bdd91379f48b7478ea53573d0bcb8b9552de1d860e8460f411b42e2ad0b6e811ddbccf0ab298e7370c6c2a329a1a365491eb4775c68d11bd7
SSDEEP

6144:4VqhI85YFblFBvTFYq51/7FhD5oWXp442HGO4SAKmi/u7E8zP+vEja2azMe:aFblFBvTqq3xl5ognOQikP+vQOAe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c18a24e29e4752ce04c1484e1613b3d0_JaffaCakes118

Files

c18a24e29e4752ce04c1484e1613b3d0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 351KB - Virtual size: 351KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ