67dfb7a9a7e1b4687d1dec5bf82a602c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67dfb7a9a7e1b4687d1dec5bf82a602c_JaffaCakes118
Size

723KB
MD5

67dfb7a9a7e1b4687d1dec5bf82a602c
SHA1

6f7852065ba81111a46d9a4c5fe5f329f8a24195
SHA256

a261dd922ff3a1794c4ceea29d0d363ea77f8b858987c13ef416314ce316255c
SHA512

f771c3c6df8cd2bd8833dcf9e7681d72394d1d283f9720d353e1f7a62cd5917f7f5f24af7e23b6f0c16a2a087ae1cd3973e059237ab57bae97de23c00fb74fcc
SSDEEP

12288:Ht9v5UZIvX41qVb0xxOSDjld14BRXjIjbqg527I:Ht9O4wm0xxOOr+Rh7I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67dfb7a9a7e1b4687d1dec5bf82a602c_JaffaCakes118

Files

67dfb7a9a7e1b4687d1dec5bf82a602c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 251KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ