cf17b35c39b9d7935881b60ccf194745_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf17b35c39b9d7935881b60ccf194745_JaffaCakes118
Size

315KB
MD5

cf17b35c39b9d7935881b60ccf194745
SHA1

a50647fc33fea1c7cf4abb091905d608e668ae38
SHA256

23bcce1cee7d51debfe3e02a7b9193cb05e5be438f00c88a8e38c50cab291d6f
SHA512

2312ff34dc6948e9f7cf4a19fb48324a11638b0b08790a9446eb2ed1ff80f6ef77166ff9f49b634fc090950601b6d29e263111d61a019e53c216377516fd9859
SSDEEP

6144:LZBtembZ59AffeYc0gkF5Xf6QY/6cAVAQLh3++i2Wgwj:LZHj9e7XMD/njV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf17b35c39b9d7935881b60ccf194745_JaffaCakes118

Files

cf17b35c39b9d7935881b60ccf194745_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE