e79173aba06cf0204b5614265d817685_JaffaCakes118 | Triage

Sharing

General

Target

e79173aba06cf0204b5614265d817685_JaffaCakes118
Size

699KB
MD5

e79173aba06cf0204b5614265d817685
SHA1

17bc5b0a29325ba339f0f9c66bfd40d54f05b83e
SHA256

c6337453d80a0cd6bbf122e7b359da3d9d7e44eb41101bbbb3fb66ff5e5a91c7
SHA512

46d98f39d7a5ea5b2de0497cde8d195283e04ba266f2ae304801aee802d2585cf19738771bb1498b9f2e68406e6020440fcaec1d81991032ef29e90968d30ea8
SSDEEP

12288:HdyH+dDQqRZHTdn807yX9ZpBRXjIjL5c1WOCIJd:HdKqRZHTd8RNZHRUchCsd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e79173aba06cf0204b5614265d817685_JaffaCakes118

Files

e79173aba06cf0204b5614265d817685_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ