264ee7014b270bd66e3222fdb4b87da1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

264ee7014b270bd66e3222fdb4b87da1_JaffaCakes118
Size

150KB
MD5

264ee7014b270bd66e3222fdb4b87da1
SHA1

d5b6f8da8c1d490797360a69a03393d81a94119d
SHA256

7132f2ddab6468275ad82b883da96008c9a389268ac92890a8115f88734a00c3
SHA512

0819e4fbd1ac6682ff6c7297667ff410e51f0a5b9ca3e031afc1bb0c3b48f7144b65a2ebafb8229d40b3dd865088f135f77fcbf6a30845775b0906efbab1a27b
SSDEEP

3072:K4fIr3t+aUcF5CvZhcPFAx4caG5NAgqsZ+l1:zfKG5Cqi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
264ee7014b270bd66e3222fdb4b87da1_JaffaCakes118

Files

264ee7014b270bd66e3222fdb4b87da1_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wlsetup.pdb

Sections

.text
Size: 720KB - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 339KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ