1614afec190ad53e148b60b6fd729922_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1614afec190ad53e148b60b6fd729922_JaffaCakes118
Size

749KB
MD5

1614afec190ad53e148b60b6fd729922
SHA1

3807575cd640ed023cfd59ab625dbff6dd22674d
SHA256

e42f714520fafd6a5b1b6d13bd7ce4b728eff7352825385194c33d4c5cec5608
SHA512

28aad141ec9e55d2d957d2ef60b8f49c50628349fed4cd62f8d3fbdded45e0a1c89952488691195c890db239052d8289593e693ebc3edfc6a9a1c3bb8cee084c
SSDEEP

12288:6iigP7uII7WPIHFZQWoW1lADk6rOkEx5o7pKyskZWNCGNF+0WUxwW1cuQ1bxA9rL:6ii2u78mZncDkYC5up6kENFfEUvQWL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1614afec190ad53e148b60b6fd729922_JaffaCakes118

Files

1614afec190ad53e148b60b6fd729922_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mi_exe_stub.pdb

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 542KB - Virtual size: 541KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.qnk
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE