e7e489a313cf6f85441e789af5bd6795_JaffaCakes118 | Triage

Sharing

General

Target

e7e489a313cf6f85441e789af5bd6795_JaffaCakes118
Size

784KB
MD5

e7e489a313cf6f85441e789af5bd6795
SHA1

1b6f26faaaa14bc26594d251655fdd159ab42b4c
SHA256

e61a7c609fb77e3001bdde0a14cc7db904c51456b646d6e662b02c474737edfb
SHA512

92797a05d0461395479b0437ae28dae55e067eeee64ec9db447cd4c052ee4ce9dc13101bad81fc4ba70708e18bf6ada8280d168330bfe0244b452078e2742d06
SSDEEP

24576:S5BoF1ppGWWLPVlIktvUFJt6BS42xDKpUBQ:6BoTTaql6wxDKpyQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7e489a313cf6f85441e789af5bd6795_JaffaCakes118

Files

e7e489a313cf6f85441e789af5bd6795_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 707KB - Virtual size: 708KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ