176383a9cbe93219ccce52123707db0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

176383a9cbe93219ccce52123707db0a_JaffaCakes118
Size

331KB
MD5

176383a9cbe93219ccce52123707db0a
SHA1

3e31abedd04e01766d4d2aa5e13a8ff9bf9703b8
SHA256

aeff64c43f8140bffd46615ea5aca28748df9ba98866f35854e1ff75efccce04
SHA512

b26085f97e7f057fb3f357e37b64d46ed322c0342cb75cf021c298e4dd0706b9646650f0ec34c6a46c0f2b89da5bf9d2e380d35f80418526c6ea0f31eab61043
SSDEEP

6144:iY2E83kxXxb5zOk1p0lYvhreBG1MEQh8KFVqH3ONykvQ7Lji:12EfxXxb5beOJrKEhK2WykvQ7q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
176383a9cbe93219ccce52123707db0a_JaffaCakes118

Files

176383a9cbe93219ccce52123707db0a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ