c227c571a9442e3b2d805b670c8add21_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c227c571a9442e3b2d805b670c8add21_JaffaCakes118
Size

592KB
MD5

c227c571a9442e3b2d805b670c8add21
SHA1

0f04b5e21d4bec8436c22df5d08573d2109f6b07
SHA256

d12c419af7e0d48ff52682d68e6c398b66be801c9709f98eac2b1ef8ffec92fa
SHA512

3718204281702ac1ebdc40dbc5899ba2afc5fdceac3673a7861b5124c3f3dfa3bf1aa63e8c12a296fec15795d8b438a720a1970193a0e5b7d7e73b0b02dca81e
SSDEEP

12288:/4Pge349oiakupG6atifad+Y3qsRE2A7hx5odPW7dRk0B1WS0D0gR:/4fJ1k2GZ+2qp3gPsdaVSJK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c227c571a9442e3b2d805b670c8add21_JaffaCakes118

Files

c227c571a9442e3b2d805b670c8add21_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 706KB - Virtual size: 708KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ