cf171f2101909432a402b6a602cac991_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf171f2101909432a402b6a602cac991_JaffaCakes118
Size

147KB
MD5

cf171f2101909432a402b6a602cac991
SHA1

34e2d6531148d036c36bd7c10b42dbe38d5782dd
SHA256

066c9e63db9ff025880b515ff584da95a1a45db2519f774dc12f1513a6a37494
SHA512

73bbd24349121af25622998dbf08dec887bbf0b65af184370c3c0b65c69b593dbc380f340e22c10779b726f90dbcf3f8113ad62a1fedc828d2bc7c2014d41316
SSDEEP

3072:z5Rfr1ZZpFhVpnd1GIILYOLZpJoFny6moAitgmHyX7UoDl:z5tr5BVFd57OLDDigmSLD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf171f2101909432a402b6a602cac991_JaffaCakes118

Files

cf171f2101909432a402b6a602cac991_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE