250279dcc851a428d632cba5f6040df8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

250279dcc851a428d632cba5f6040df8_JaffaCakes118
Size

114KB
MD5

250279dcc851a428d632cba5f6040df8
SHA1

b581ec9cf6d9fc52747e2815846b1761b92d3479
SHA256

825fc7dd6bc1c72e4d062e6d1e424fad67a42001a8ab1d423e14779e1d5aa441
SHA512

10343608bce659d7db3e73f5692664d9117113716a687d1d804f42526d7b0fedeb38741361519d154d1017b76a40c7247e7b3c8d149e40486614197dc3c3f6d6
SSDEEP

3072:/XAtWYKBlVf+DGfAUVNSnAtoo6mot6N4Q6PnUH9:fAoYKXVf+0AONSqUP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
250279dcc851a428d632cba5f6040df8_JaffaCakes118

Files

250279dcc851a428d632cba5f6040df8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE