c7b6513f6921916b30fdf3065521d2aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7b6513f6921916b30fdf3065521d2aa_JaffaCakes118
Size

783KB
MD5

c7b6513f6921916b30fdf3065521d2aa
SHA1

d10188c04b559185142d138218230d219c5d6583
SHA256

a81d2be844947079195fc9e1e8508c1adafe48cc4fd54c0d8dff421a0e6d7f49
SHA512

ba751d2d6fb097ead8c149564e9c5074fdae7b9c9791bd88f11d51d7b7b688a7577eacf057ac84e6fbeb3ba71ff97c288aa599a8d0747be99144e5aed06d8b67
SSDEEP

24576:yvJzq/YKIaru/YRCKXLjZJO23M2IE/2qK03+j6HP:WJDKIaruoZR04ApxWHP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7b6513f6921916b30fdf3065521d2aa_JaffaCakes118

Files

c7b6513f6921916b30fdf3065521d2aa_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 706KB - Virtual size: 708KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ