15bab0d6c14e066e353cc85729d47941_JaffaCakes118 | Triage

Sharing

General

Target

15bab0d6c14e066e353cc85729d47941_JaffaCakes118
Size

596KB
MD5

15bab0d6c14e066e353cc85729d47941
SHA1

48e95e2fca271a1b23a0464a7e076788e5cb9b14
SHA256

65082dcfe542048540953f10eb957b6c76a07795a191f7d213e595cb6e0f367d
SHA512

21ee0f5bb25a870ffe7c3399002c6a246118ba3302f19fc56afc41537b2cac465d91b45b6cccceccada6b3755e73dfc8e279251a258265f230a3f75eb929b4ee
SSDEEP

12288:lAkYLnWp70ZSET97tU5UIOXOqLalZl3c8E7juq/9:lAjW18T9QOXqg7jN9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15bab0d6c14e066e353cc85729d47941_JaffaCakes118

Files

15bab0d6c14e066e353cc85729d47941_JaffaCakes118
.exe windows:24735 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

��<��2��
Size: 3546.3MB - Virtual size: 2426.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�3į��?
Size: 3955.1MB - Virtual size: 928.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

��a�U
Size: 557.0MB - Virtual size: 1294.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��hQ$�!
Size: 2835.5MB - Virtual size: 1205.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

}"<*
Size: 2245.0MB - Virtual size: 3140.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE