1588f449839fbea9e25938f960ade8f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1588f449839fbea9e25938f960ade8f8_JaffaCakes118
Size

711KB
MD5

1588f449839fbea9e25938f960ade8f8
SHA1

12c14a3cfb15b3c4ce9c7ab32d864b40be0da9e8
SHA256

cb15dd1857088d08bf4b340d7c549ff85a388740427f0c38b5410b7c5c57a3fd
SHA512

de98bbed2aea3e8e927b77654db3e4f25bb7cc1c44adcf47ddc233597f05f35665f6b8d0c1c3376eba675c31621b70c1782a6c23f8a0ceac0c6d918a89c8e76d
SSDEEP

12288:m0XB2ItU1XcWklpw5CnDFxsEhnxQRcWagyZwwcsD1h+G0hSeBUEV4:myccWkvnDF7nxQR8gyZw5sDdxeBUK4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1588f449839fbea9e25938f960ade8f8_JaffaCakes118

Files

1588f449839fbea9e25938f960ade8f8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 661KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ