285612b0705a2147e51956b17718a0f2_JaffaCakes118 | Triage

Sharing

General

Target

285612b0705a2147e51956b17718a0f2_JaffaCakes118
Size

114KB
MD5

285612b0705a2147e51956b17718a0f2
SHA1

c2c41adee54602b9788ed9faf3a4b27b3a077c0f
SHA256

1301f889fcabb7aff01a4af61d71fe04afcd8d1882df29290c2a1c3b6e6b7af9
SHA512

2a8d257a0840ded3c62fdde88e36b83e23a6c85f92e110f5fe4e961000bfb7f8247e7cfe1d6d9110f7e9f4851e790d16f518bec2de3917b781cdecb976e429a5
SSDEEP

3072:ne7oWOdBVpqcFbJU0qU09Vfe95DLnDxzg1fJLIH:ioWOdBVpqc9J5q5zg81fJLIH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
285612b0705a2147e51956b17718a0f2_JaffaCakes118

Files

285612b0705a2147e51956b17718a0f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ata
Size: 11KB - Virtual size: 7.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rr
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ