018c51d4e652943a9312b241fa2315b0_JaffaCakes118 | Triage

Sharing

General

Target

018c51d4e652943a9312b241fa2315b0_JaffaCakes118
Size

266KB
MD5

018c51d4e652943a9312b241fa2315b0
SHA1

37e1ce46c99872484923d3cd97376b21fd2a612a
SHA256

37582e08bc604169db4572be16c1e706747ae059f6363d960d8fb22d59c4a9ba
SHA512

aab30d06980fb928db9e3ad40b4798e2c6872e7e280d65a0f610c5f9ab70728efebf1bdd4dade4182e60326ba4ec770d09e44d9aeda97adc9fdb781dc96b301a
SSDEEP

6144:w5flJkj553I5o4+JU+gUn6YZ3JxbTRipTBgg:ekf3io4sU+HnlZ3JxbTRipT2g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
018c51d4e652943a9312b241fa2315b0_JaffaCakes118

Files

018c51d4e652943a9312b241fa2315b0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ