f14a71d598349c53104ef0b61a0df9be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f14a71d598349c53104ef0b61a0df9be_JaffaCakes118
Size

860KB
MD5

f14a71d598349c53104ef0b61a0df9be
SHA1

7db9878a000bc57c0eb834887d30c9108c1cbf9c
SHA256

53430307a4f0dc4973ca5ba1f856c4cecc95550edef489a73438a061593de5be
SHA512

9aa182b5b73f20ad977cea9797fbb9d0633234e0d41e8a8cd71cdd2938f26445bcb70e8291afa7485c7ecffbb924861e92ef00ece25be9d4aee917a3961310d8
SSDEEP

12288:iE2r3gx+IK4UvmdrRDNYJdXN0Bd2g2qnwd+2VJfhxf6dxS3T4eFpdxoBl:T2rwsN47oJdXN0BN2qnw4a+edxoBl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f14a71d598349c53104ef0b61a0df9be_JaffaCakes118

Files

f14a71d598349c53104ef0b61a0df9be_JaffaCakes118
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ