c1ebea22b18e664ce9ec977c37b882fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1ebea22b18e664ce9ec977c37b882fe_JaffaCakes118
Size

727KB
MD5

c1ebea22b18e664ce9ec977c37b882fe
SHA1

e7856059666ea1f08d7128a6c48ae1961c376a7a
SHA256

7401c1683bf41a39259c3b7b1bcd42e8fce5d52770b58a22d5ab201396c7437c
SHA512

25f2a66ca7a69ff2249d0426a463c3ac33be65dcac3df440721caa91f0e4654f3c8d03e2e89454fd7fcc0643fe32d7ab706aa2e06c49dfb07921bd97ee56de25
SSDEEP

12288:LwECaUglPnFsk7P0UahDyDT17BRXjIjpNrU2/MhkrzVKbhn:LwEC70qkgUahDutRIxrzVY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1ebea22b18e664ce9ec977c37b882fe_JaffaCakes118

Files

c1ebea22b18e664ce9ec977c37b882fe_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 255KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ