c90d980838940d66342eb387a5cea788_JaffaCakes118 | Triage

Sharing

General

Target

c90d980838940d66342eb387a5cea788_JaffaCakes118
Size

298KB
MD5

c90d980838940d66342eb387a5cea788
SHA1

37a0b48e38507b37b116154e2de81b3dbd4d58cb
SHA256

2f13285b4ecc15f00b0412a937c3fd3ed8f638bfa3f004602551c32c076f3f18
SHA512

3bbb8c04aa9dcb5e38bc1da0b1a9ed6685aa2be1d2168fa881c09a1c2f9d39d96014e98af68d461a044426e21ef50f825d8a98f33ba61b2132cb4057766f613c
SSDEEP

6144:sIuE7JECdgb6vQeTBEwLUJPjO11Bx6b1uEk4x+0CWzefNU4xODz9ZRjgbnoPAHVg:sOJ1e64eTRka76b124J1zaNUfD5ZRjgG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c90d980838940d66342eb387a5cea788_JaffaCakes118

Files

c90d980838940d66342eb387a5cea788_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 445KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ