44c7d9b61c3606f571f444954b0f18b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44c7d9b61c3606f571f444954b0f18b2_JaffaCakes118
Size

307KB
MD5

44c7d9b61c3606f571f444954b0f18b2
SHA1

6e9b0a233dce231a2a8bf0276a0fb86c5be56613
SHA256

9943993c30638959d15a2b3f2a3ccf1d3b8577158e39bdd6c1675ad0db5e7ae7
SHA512

0dca3334a5a4a124bc09dfcc27bc7960567fe5b27bc8a57e961be34ff5e7b4d25fbb20cdd789b08e4eeb7597a3b3403ac7b6fb15ddccde9aacab3b258d87ed95
SSDEEP

6144:2qzfT72Y0SXzinYKTY1SQshfRPVQe1MZkIYSccr7wbstODPECYeixlYGicXg:2C77SSuYsY1UMqMZJYSN7wbstOD8fveL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44c7d9b61c3606f571f444954b0f18b2_JaffaCakes118

Files

44c7d9b61c3606f571f444954b0f18b2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE