0a5279ff7ef1c20699d8cc95b5d4dd16_JaffaCakes118 | Triage

Sharing

General

Target

0a5279ff7ef1c20699d8cc95b5d4dd16_JaffaCakes118
Size

305KB
MD5

0a5279ff7ef1c20699d8cc95b5d4dd16
SHA1

122b4e91bc67e76eb277679921ec2ac7e558611a
SHA256

a6d1c359d18958b82a077315626b707aae5b2bed9f5dafb01f8173866928101d
SHA512

881780d7671d9f273d6bdd7476a96282b47b40dba640b9bb9f671c927db74a037ecf0c331556b0f531d9bd57c12017c17161251795c109bf745c37051e179718
SSDEEP

6144:5GSzWT72Y0S8zinYKTY1SQshfRPVQe1MZkIYSccr7wbstOiPECYeixlYGice:5GqS7SS/YsY1UMqMZJYSN7wbstOi8fvA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a5279ff7ef1c20699d8cc95b5d4dd16_JaffaCakes118

Files

0a5279ff7ef1c20699d8cc95b5d4dd16_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE