dde300b87ecf068c9abdcf848dee3447_JaffaCakes118 | Triage

Sharing

General

Target

dde300b87ecf068c9abdcf848dee3447_JaffaCakes118
Size

835KB
MD5

dde300b87ecf068c9abdcf848dee3447
SHA1

fb571681d44a6c1ae4344c31d3dab21ae3fe7c48
SHA256

66b893e333f8f53013f2310afff0ffea4cf610d492e16caf21e70d02a5471aba
SHA512

5870fd1bd4cc59bceab0208d32adff5c03ec69a2592fa6c0dd64a1e46705904bdb005d0b9a6d4872bbb2d006ecd0c1cfab9f7719ef20fcc44576bf179a35ee3b
SSDEEP

6144:dwHWwM5oCuoaIk7v1xsp/5pahjUGVhkhsYQGRdT6i2ookjHw7i633Z+fqS:dwrM5NaIk7nsp5pahQ2hkhsYv7DMS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dde300b87ecf068c9abdcf848dee3447_JaffaCakes118

Files

dde300b87ecf068c9abdcf848dee3447_JaffaCakes118
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 566KB - Virtual size: 566KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ