1253924e2e7397ea189a2ad6cab33d46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1253924e2e7397ea189a2ad6cab33d46_JaffaCakes118
Size

445KB
MD5

1253924e2e7397ea189a2ad6cab33d46
SHA1

95eec3425f792cec0565fb03156d85984aae8c86
SHA256

e4905ad5c1613f26bb33689811b8de8918f9063eaaa8e2ab654398592afc8e38
SHA512

950cd60a80fc9139351ef4e8a7547affeb55d110942b3a851e77b487b91d89b5a207e37c2ba4c3f233c09b76ed751fdb0fd7d192af30d5a08f1f674c19fca9cf
SSDEEP

6144:22z3IysDgU0qzw6KwJibv14c+qL26tUiM5czd3Gv/v6PN/0FFnZhzb07poVShZkV:22asUnbOz1JGw3/LoVaZCxTqJUn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1253924e2e7397ea189a2ad6cab33d46_JaffaCakes118

Files

1253924e2e7397ea189a2ad6cab33d46_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 664KB - Virtual size: 663KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ