aa879ee64ef9ddbb524286e5cebdf07e_JaffaCakes118 | Triage

Sharing

General

Target

aa879ee64ef9ddbb524286e5cebdf07e_JaffaCakes118
Size

147KB
MD5

aa879ee64ef9ddbb524286e5cebdf07e
SHA1

c275c87566b0169764868c56083a4a18b74dd309
SHA256

ec735755c1b3e025b585792fa008d746bec97b03358587212ea0d960930ac9ca
SHA512

b495e8860e93f0885c6c22b4a7b99f5e3d3a2617549968c0ba3b4dc451141a73206b132cc650dd9ab4cea0b0da5a99807fb48b0b7967c92f1dcd40c658058557
SSDEEP

3072:GSYjNea/KP360smHk4RS5h2zFWvfAPWYEGpQb7PKbBz:kInPpvw2YQPWIB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa879ee64ef9ddbb524286e5cebdf07e_JaffaCakes118

Files

aa879ee64ef9ddbb524286e5cebdf07e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE