304fcbd2a52e9be0cde3db0236607e18_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

304fcbd2a52e9be0cde3db0236607e18_JaffaCakes118
Size

131KB
MD5

304fcbd2a52e9be0cde3db0236607e18
SHA1

55137e06706bf31ee43217a6af04472874eb7b3b
SHA256

737a8a32ddaa172aad17644b4fa67bde4abad54557ba8252b3c5ece5a14eb8fb
SHA512

051830f93a4654f0d067d5bf34a77afd38869c306165d21c0d6cfe05d6005ce4399e546bff0c3129e32176424a4f88cacd67896fb15fb03625b4dc647d1ee98b
SSDEEP

3072:CqsUK1n+UBL4yNUEaiQOt9cMFbr7XKDyzfvZ:XbI+UzSEatx8br7XSW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
304fcbd2a52e9be0cde3db0236607e18_JaffaCakes118

Files

304fcbd2a52e9be0cde3db0236607e18_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ