231bbd14f3f5ef841f10896a8cc297ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

231bbd14f3f5ef841f10896a8cc297ae_JaffaCakes118
Size

489KB
MD5

231bbd14f3f5ef841f10896a8cc297ae
SHA1

ec63966eb9905f0ede2b27127a6fda9d3a8116f8
SHA256

759ceda8f601ecac9bad3cc00dab818f6c483d0053314b37c47fc4f7bb9f80d1
SHA512

d29b8a5158f717fe028352b1c5b107cdaf055ef9be278a4fb9912db2b8c4d570d3367a7eccc123c03dc075a1a06600dc8c82ece0a3dbc24c2ff20b1a12fa4680
SSDEEP

12288:dwLlGXd4OvXkLGHj0qTDzFwjwLlGXd4OvXkLGHj0M:dwpGmA0UTPFwjwpGmA0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
231bbd14f3f5ef841f10896a8cc297ae_JaffaCakes118

Files

231bbd14f3f5ef841f10896a8cc297ae_JaffaCakes118
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 566KB - Virtual size: 566KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ