74a1e4f8c48502f4cf6bdf1ff5c842a8_JaffaCakes118 | Triage

Sharing

General

Target

74a1e4f8c48502f4cf6bdf1ff5c842a8_JaffaCakes118
Size

691KB
MD5

74a1e4f8c48502f4cf6bdf1ff5c842a8
SHA1

ac709a266cb8afaf136986e5e5f93a37ba22c410
SHA256

c4dc5ce27a5d56ed4c621fc17dc8febb54acd0db97788d6c539b9ae026d0d8a4
SHA512

b26bf7cd4c00548d2e0e8d6fd601f3bfac9491a69a37046932bf144a2ccc29117413b3f4169498b357e94d596ce1dfbeae4a42d91da713dfc4df77e45bb936f7
SSDEEP

12288:44I1R/pP6USobBbcY4JiOBRXjIjO8Zsq4nss:44EREUSobBbeJ7RCZN4ss

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
74a1e4f8c48502f4cf6bdf1ff5c842a8_JaffaCakes118

Files

74a1e4f8c48502f4cf6bdf1ff5c842a8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ