75994f91b8b6f47480b84430cf7428bf_JaffaCakes118 | Triage

Sharing

General

Target

75994f91b8b6f47480b84430cf7428bf_JaffaCakes118
Size

712KB
MD5

75994f91b8b6f47480b84430cf7428bf
SHA1

f78c9a9aa76601d9bc2860f5eb0e875dbede81ec
SHA256

9523628070fd253963dd4c472de008825f7f5d1ce48c7667c9983250c9618617
SHA512

17113d948322a51fe1a748c0e58f96846dd43acb4e8cdbb9e4e4aee8a83e3ab87760433101a7f3a13aa5cbcac1dae2cdb1db0776c271aebb63129eab4d991809
SSDEEP

12288:odgTMiq1S3xkQ28oYYgTM/foY3DBRXjIjX5cByo:2gO1XQ28oYY7Ho4VRgcBV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
75994f91b8b6f47480b84430cf7428bf_JaffaCakes118

Files

75994f91b8b6f47480b84430cf7428bf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 241KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ