654107992728d43060c2f7dd9ff776ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

654107992728d43060c2f7dd9ff776ff_JaffaCakes118
Size

699KB
MD5

654107992728d43060c2f7dd9ff776ff
SHA1

73a53aedff9c7768b83eda024c21effef0caa9b7
SHA256

f4a871f9798e4881e9ea4f8911682858dd6d2a7391adf703bcf5e81892916c63
SHA512

ad9420fdca2743891d35d4bc7b54bb40bbb720b4e679c5e93a82ff9af16d43b20a8c0791e77e4bf3e5f91b09bb44351aaa6d3b36edc2291d34eecc30d34dfff8
SSDEEP

12288:/dyH+dDQqRZHTdn807yX9ZYBRXjIjL5ce9js7laymlT:/dKqRZHTd8RNZeRUce9jsRaXlT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
654107992728d43060c2f7dd9ff776ff_JaffaCakes118

Files

654107992728d43060c2f7dd9ff776ff_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ