1341885e09c3e21a502ec9fad424be36_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1341885e09c3e21a502ec9fad424be36_JaffaCakes118
Size

163KB
MD5

1341885e09c3e21a502ec9fad424be36
SHA1

e82ba9e2dd36274f3c6098d93ea045a332868d42
SHA256

6cfba0fc7d240decb9e6376affde6b0505c0dd523f21a4a7081dbd93f7ea4651
SHA512

3172463e4a6ab50ecbf8a3f0e2983f85d304e6b2c666043e415016d04fdf90eab0eada0aa0175c35a131c850b20d75f0185472c05ba67eea38b4d0e1e8a9edcd
SSDEEP

3072:w/TLRpOPKA64RtNU1W7hcp4KrnK6n023Svtn6A/oArzYP:wTLCiARtiWUNrnKR23MbYP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1341885e09c3e21a502ec9fad424be36_JaffaCakes118

Files

1341885e09c3e21a502ec9fad424be36_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 702KB - Virtual size: 701KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ