ddce9fa0075f06f5fde65d6b3d5781dc_JaffaCakes118 | Triage

Sharing

General

Target

ddce9fa0075f06f5fde65d6b3d5781dc_JaffaCakes118
Size

137KB
MD5

ddce9fa0075f06f5fde65d6b3d5781dc
SHA1

3097f44bd1cdfda81e940ab27bcd19b604cd58f7
SHA256

91384caa5ad2cc5f57b8ddb351f1f94b95f69f134ccd55378816612dff691690
SHA512

2323f2608741ca94783e9f689adcf172b73689b7fb0dbd5d3862ee028d1f06c6dc137dc341675bd9ce09487a2aadda5d7157b04e3769b8f082e30e01e0e595dd
SSDEEP

3072:rgv2JSGT+iwZkS428HCGD+UPk6+ugR8YIid9sk:U2R67GK6CM5k6ytIrk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddce9fa0075f06f5fde65d6b3d5781dc_JaffaCakes118

Files

ddce9fa0075f06f5fde65d6b3d5781dc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 441KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rijagar
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.fad
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ