f05683b0bcee6e6ee654ca5e09a18419_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f05683b0bcee6e6ee654ca5e09a18419_JaffaCakes118
Size

1.3MB
MD5

f05683b0bcee6e6ee654ca5e09a18419
SHA1

92a9a0218e6d162a3cf41a408be0c18e70f41339
SHA256

c7e21105fbefff79b217311e523fabc728095636ad017f15372becfd88a47846
SHA512

a61bd31def05ca8fa4d1d25195c43c095c48f1b8739d919fa200b7c082fd14a1cb7f5dd4f2dfdbf4dd497389e40dd59f56ec03f9518d3143c8cb858c8ac30227
SSDEEP

24576:EqU0JUXBenZ2EL3TZWQ9WpQ4nMHP1+CH+kHE3KuuOMHCXmmLqxnEp2222222222o:DWBEZ2EjTZdWq4M9+7kHUlpXfqxnEp2J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f05683b0bcee6e6ee654ca5e09a18419_JaffaCakes118

Files

f05683b0bcee6e6ee654ca5e09a18419_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 427KB - Virtual size: 426KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 821KB - Virtual size: 820KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ