0be37ca0638b7916e1c4184d3dd350f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0be37ca0638b7916e1c4184d3dd350f2_JaffaCakes118
Size

703KB
MD5

0be37ca0638b7916e1c4184d3dd350f2
SHA1

555bd4a4e3703eaadc282b7e7b4dcdd2067ab326
SHA256

b10c07775921cec16892ca887c87b6976b9d030d55b4203b971f681ff38fbb3a
SHA512

3ffa2fce388e4ec087f4b35f7e015ac1c69262d3cd10c4f3a31aca8c786a4ff367ea2d34267c94b17245f93dddaa32efde95352fdf2f78f1e4690294c0a54693
SSDEEP

12288:iWWw9qmS88sCDypiS4642mE1yBTFC7kPb4sQS3+c6MItEhZwYq8CqmsAZ47UEzm3:ioM88sCDyJUDUsJC7kPb4bS3NmEhZHqP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0be37ca0638b7916e1c4184d3dd350f2_JaffaCakes118

Files

0be37ca0638b7916e1c4184d3dd350f2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ