0556498af22f2b6ccab4fd5fb58b40e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0556498af22f2b6ccab4fd5fb58b40e8_JaffaCakes118
Size

967KB
MD5

0556498af22f2b6ccab4fd5fb58b40e8
SHA1

ceda325b72aa8eaa81b86f840d4546bf850a34a0
SHA256

ec5ed0a20e1c9613ae32c7edd3c7abcfb9e25633d1d5294af4a2e69e0d759a91
SHA512

308ff7d4427aeaa92a4d047803087410b785f29751971cb42e076d4f3b142f2c6c33f2577f1408e9e58858e90315331df0ae99d8eb2e4a3dbcf0e52dd644ed1b
SSDEEP

24576:hror89y/krwHfnHSCR9n3mdWBk/O79KcSwuDKfKT:R2/AwHfn0WBp79KLwjK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0556498af22f2b6ccab4fd5fb58b40e8_JaffaCakes118

Files

0556498af22f2b6ccab4fd5fb58b40e8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 274KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CRT
Size: 316KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ