02fa9d863476ec162581823e98be6b04_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02fa9d863476ec162581823e98be6b04_JaffaCakes118
Size

623KB
MD5

02fa9d863476ec162581823e98be6b04
SHA1

ab16c02dde3f6dcf0934f1d6e71d1cf064c165ca
SHA256

e7c6814bfe3b12c108bc44e5de3cc6412c01d2793a3b0c91baea16dcda6e82eb
SHA512

511daf899e8df2acf0d00b63a831e3f0b841217b061ad778979da0e3dbd90bdb1100fc30d2624e5bc2a5af554fc47eb9f1ea775c41403d8ca086328e304d3de1
SSDEEP

12288:LEc4zHrWO/qC6pb5X9EIHF0uy2R8DjMG8U/Y4Dkt++CLZ20118iCoS+:JVUQdIf2lGp/iUFA0118i5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02fa9d863476ec162581823e98be6b04_JaffaCakes118

Files

02fa9d863476ec162581823e98be6b04_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ