048c19271d327d17903ac323cc245aad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

048c19271d327d17903ac323cc245aad_JaffaCakes118
Size

575KB
MD5

048c19271d327d17903ac323cc245aad
SHA1

9572441456a0ba16d518be8141f7d831f0b82590
SHA256

67461a09b64e4cd296cbba836e1d62b1818226a43e4f60fd9573d92684d08006
SHA512

4530805b057e2cbeab3c303b7a12f7a3194e7329ae2cc074744243f793e709add780a0176f74c95be5d9aed2216e0cf752530af7335b6ce01fc2d72918ee17b4
SSDEEP

12288:ohGYNDXtUaQSKdh66VsXbbOEjUPbkBKsT4kBVEv1+Wb+SdEwTeJEl+A:ohGYNztU26h66V4bOEjUPbunT4kBVEsK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
048c19271d327d17903ac323cc245aad_JaffaCakes118

Files

048c19271d327d17903ac323cc245aad_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 886KB - Virtual size: 885KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

STLPORT_
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ