66ce0100ddfa67452c383c904c7648ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66ce0100ddfa67452c383c904c7648ee_JaffaCakes118
Size

2.2MB
MD5

66ce0100ddfa67452c383c904c7648ee
SHA1

d390bf78cba3a3826e4fe22de2ff31736164c8c0
SHA256

50c2334cc099d41dfa71bbcc2afa148d2e56435c6b0723884c1fcf21a3791d9e
SHA512

41de9ee35c815a68075c00df84e03b53cd26ad735ac3be5472128b479dc808888864ba545a1790516d947515a837632050e6a206df608bd3caacac4d45a27c81
SSDEEP

49152:gpiLWz6b3xs2Be94W/+hm1vrbO16m0pQ/Ec6bGXSn+qqGUbNL:gAW03xs2Be94xhm1W16m0pjc6bGCn+qK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66ce0100ddfa67452c383c904c7648ee_JaffaCakes118

Files

66ce0100ddfa67452c383c904c7648ee_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 396KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ