c7948f87b20e0977e6d0c0d5f144a313_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7948f87b20e0977e6d0c0d5f144a313_JaffaCakes118
Size

2KB
MD5

c7948f87b20e0977e6d0c0d5f144a313
SHA1

39ffe8d9f7698f989ce6a3173e792cb8f38a2735
SHA256

4db0e695db6d72fc6dc5877063da84d3fe61073bde8fc6bcf034f9057f15cd68
SHA512

4eb5b24b6560e265cf73b6b4bd6c98d718f5eeac860ea71d2747eeb8cae8a8a0fc80f59ea0816bd36b2d43bc1bb0dacf689619d5bbe8b7cd94cf27d10a2dde68

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7948f87b20e0977e6d0c0d5f144a313_JaffaCakes118

Files

c7948f87b20e0977e6d0c0d5f144a313_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ