c205fe6a970677969ad90a54ded90167_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c205fe6a970677969ad90a54ded90167_JaffaCakes118
Size

223KB
MD5

c205fe6a970677969ad90a54ded90167
SHA1

0f4bebcf0747cc4788096a30d0bf6ac0920a3109
SHA256

679d507b05e8d218c109ebe7be1fa6c6068c8a21e45154088561d48577270e38
SHA512

adc4f9adb0fe6f5bb0463987f1f529d283eadba15db58df9f78f33ba71a987c4f2ecfa610ba5c4934537d09adf36bc71e4861da68df28fe49cc761d6d8965974
SSDEEP

6144:fhJOIPrb3BRS4lQJB0fTLF3jpm3rVJb2VJrNjEx:fhJBRvnk3rVJIox

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c205fe6a970677969ad90a54ded90167_JaffaCakes118

Files

c205fe6a970677969ad90a54ded90167_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ