033033d6f697dca89d4cec67d62f9036_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

033033d6f697dca89d4cec67d62f9036_JaffaCakes118
Size

4.8MB
MD5

033033d6f697dca89d4cec67d62f9036
SHA1

9ad0e105d6500b2c236b557e68af95431cf3bd30
SHA256

f1da8c44207e2b0cfefec6abe8645cbc8ea00e4b9b54064171dbd1e25ceff732
SHA512

aaf904251915984b757a3c61dd8162b161d88bffd118a6bc4e11ff7342be92dd33a25d3189b7195bd51bc06fb1fd71376e1bc561bb9f9e2ec88eb5d2ebd5c7fc
SSDEEP

98304:ihwmbLECgp9ffQC10ymsWLIl1lM2+Bk74WII7rCBDKgSnUy0IBmmC/A:ihkQCKlNMMPBi4WIIHJgwUy1smuA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
033033d6f697dca89d4cec67d62f9036_JaffaCakes118

Files

033033d6f697dca89d4cec67d62f9036_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 685KB - Virtual size: 684KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

STLPORT_
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ