ed423f453c5ca8f4a7c8bd9ba0e88720_JaffaCakes118 | Triage

Sharing

General

Target

ed423f453c5ca8f4a7c8bd9ba0e88720_JaffaCakes118
Size

412KB
MD5

ed423f453c5ca8f4a7c8bd9ba0e88720
SHA1

6405061a2f228f8882e908f025bd8f429052a66f
SHA256

f0f373a9ba82996a469778a6372af87206d69f8e84c5e255dc5f70ba99a155cd
SHA512

4409efcdfb1fbfc85bedb7eea379d0ddf42f83bd3fa10d05a6b3f94118913b0cd862225e31c9f9378755cc58f1aa67659cec62762e4d5604a7c23cbd59948504
SSDEEP

6144:MYUTSKe45+GWh9dTX2adDWw1Turojl9IFsANJLmfBrg:MFSr45mh9hrl4roZ9IaBrg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed423f453c5ca8f4a7c8bd9ba0e88720_JaffaCakes118

Files

ed423f453c5ca8f4a7c8bd9ba0e88720_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 223KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ