e093d93974a03824dcfe1f3c1a661b93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e093d93974a03824dcfe1f3c1a661b93_JaffaCakes118
Size

364KB
MD5

e093d93974a03824dcfe1f3c1a661b93
SHA1

295aadfacc1fb9942d117baba7653462bf6197a7
SHA256

3de1bfb41e333dd8ce71215d125f971952d9a02ccf248e3258ff4bc2a86e5bc6
SHA512

cefe681aa3734cde3f9c3cb07f3c3444a7f294aa21cd0a191445a811edc2cd17e501698211301b3aedee89ae4091c7f3682e01737d8d5f7d268032117701f3cf
SSDEEP

6144:u6bt2ymUWgJ2Qt1HTSto7S45KOUakI2ls1+VL/jgVa/DL0Ra6mSAGBmtXu5azaeA:uTghvEo7VjUakT61+VTUVa/8R1mSAGBd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e093d93974a03824dcfe1f3c1a661b93_JaffaCakes118

Files

e093d93974a03824dcfe1f3c1a661b93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 430KB - Virtual size: 430KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 354KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ