057c6f79df6a0d979d0af097fd07ec80_JaffaCakes118 | Triage

Sharing

General

Target

057c6f79df6a0d979d0af097fd07ec80_JaffaCakes118
Size

2.1MB
MD5

057c6f79df6a0d979d0af097fd07ec80
SHA1

95c730eff8d4532cdd76c06a3eb507dabffffd08
SHA256

c673c19266390da264f4de949f98e2e19a6f414d792d68eca9e20bbffb46f685
SHA512

029c473564119732d7cf2e24db1d5ee351ffe6e0ee88f6039acc1294b33f865b0bc13fcaa4a7a3a5fff2f9438785d8befb9e4c43b6644ed91824edfc47b2915a
SSDEEP

49152:5UlW+eb2aUbcjznYx+piqRSL17jhEmp1+6o8I0Eg:5Ul5zBIjzY+pNsL17jhp1+6o8eg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
057c6f79df6a0d979d0af097fd07ec80_JaffaCakes118

Files

057c6f79df6a0d979d0af097fd07ec80_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 336KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 802KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ