65a1ef3a5e5f6c9a185586de54da9a5e_JaffaCakes118 | Triage

Sharing

General

Target

65a1ef3a5e5f6c9a185586de54da9a5e_JaffaCakes118
Size

1.5MB
MD5

65a1ef3a5e5f6c9a185586de54da9a5e
SHA1

a6b91cb5cdbd413174fa7c961aab703bdbc793cb
SHA256

a1a142e502132e5462cb0250f8f50a3c072fd427d94c499bc17d988c1c517e04
SHA512

47c742857187f0c6d41745ae54a5aad970ba8d2b103e381f9231164c81b20b6989687899f556acca639f70e0f319092726bc16e96df7cd1ea5ab6d646d9048ce
SSDEEP

24576:ZRutr7f/q0N+kBw9qmoljoXYFDrric/dwVqBthRF32Uo5TeyxP:/I7KhueP0o0DrO2d7Z32Z5Tt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
65a1ef3a5e5f6c9a185586de54da9a5e_JaffaCakes118

Files

65a1ef3a5e5f6c9a185586de54da9a5e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 979KB - Virtual size: 978KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ