e996e4ef1f1f4e11e26c0bc9405981fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e996e4ef1f1f4e11e26c0bc9405981fe_JaffaCakes118
Size

437KB
MD5

e996e4ef1f1f4e11e26c0bc9405981fe
SHA1

dcdbecf4688294ac6ce3d25a102ad1e96622f967
SHA256

05fc5961a96e18d3f85af91984baa7b543d008b5d635b463e6cd60fc589fb2f3
SHA512

db9a783c0010aa206c66612e2c14b8173adbc5ad7a5c6f16806fd7b69399d9b03346e529a8c4bacc07697e0bb9aa7e9e31f5caf714793157d7ef44735904a894
SSDEEP

12288:Z9Z8m5DuEy2f+73v3m0/HkWRpsslw9rVD:Z9Z8mPrm73n/nNlw9rVD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e996e4ef1f1f4e11e26c0bc9405981fe_JaffaCakes118

Files

e996e4ef1f1f4e11e26c0bc9405981fe_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 245KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ