70936aa7d8b7855f52ee3052301a9eed_JaffaCakes118 | Triage

Sharing

General

Target

70936aa7d8b7855f52ee3052301a9eed_JaffaCakes118
Size

488KB
MD5

70936aa7d8b7855f52ee3052301a9eed
SHA1

d25e2c485b21d9b3403e02e11efcf743927cab07
SHA256

5f87895aca2cb8b828bccd8d59914d498acd810a110c70530958d7fdbbb91fad
SHA512

6dc2a090930923b8d2c2bae8f03abf76f27ec4c59d95e45333dc12317447a7996eeb92662df3fb56c69191be6c1c5d4d77632a44202fa43226bda7805cb3b579
SSDEEP

12288:IvOos7XPOkGFQ/ujd+GMv9OaVsU86EM4ShhIAV:IvOZ7nGm/Yd+GM1aL6EM3htV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70936aa7d8b7855f52ee3052301a9eed_JaffaCakes118

Files

70936aa7d8b7855f52ee3052301a9eed_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 274KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ