f651d4eb5c3cf10a3af4f9cd28ec116a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f651d4eb5c3cf10a3af4f9cd28ec116a_JaffaCakes118
Size

5.2MB
MD5

f651d4eb5c3cf10a3af4f9cd28ec116a
SHA1

cc65208a1943628ecc74f3ad9f3ce2c51e8f5b1e
SHA256

c67c2ef4e7d1f67d7b755122e0485203c49859730fe128238823e4ca127ebad9
SHA512

da97317cc9ce0c5a3ae2b1983a5260fc5fed75d7fa8d181393da56da6e77460b77ec740c20aee3632a44db50508127ebd068462a0b3cf0b78f627d9b8a4adc19
SSDEEP

49152:5qIwKis0CzrwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwmwwwQ:eKisH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f651d4eb5c3cf10a3af4f9cd28ec116a_JaffaCakes118

Files

f651d4eb5c3cf10a3af4f9cd28ec116a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 422KB - Virtual size: 422KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ