066d237a971421c3fffad26ba33df419_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

066d237a971421c3fffad26ba33df419_JaffaCakes118
Size

713KB
MD5

066d237a971421c3fffad26ba33df419
SHA1

3efce333993a2c46eb2c770e209cda01d9e9d7ae
SHA256

43eaa54c9e5e4ce60b5059eeeaf81083555d1b20a8dd96919065f03a111ecceb
SHA512

3fdeab67062e33a6849c79e8056ff2d6a4a29da0aed6f607a8acdd0aa59227e7b39e2e6a1b59e197f8170faacca235da2b856eb5fe8c1ebab12f78c890942d00
SSDEEP

12288:YJvS+q4FmBxkQSsoYYgTj3cve7BRXjIjzfBTq2IPH:YJD8wQSsoYY0siRuBiH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
066d237a971421c3fffad26ba33df419_JaffaCakes118

Files

066d237a971421c3fffad26ba33df419_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ