791bf51cdb828f3f95f3c2440d67ad0d_JaffaCakes118 | Triage

Sharing

General

Target

791bf51cdb828f3f95f3c2440d67ad0d_JaffaCakes118
Size

646KB
MD5

791bf51cdb828f3f95f3c2440d67ad0d
SHA1

617934063044436cc19c70a7b2a3a60d9aa28530
SHA256

4ad0d21446bbf4045e35613fc7e5bd475326d0fda6645a8e4bd1d60c3dbe6f4a
SHA512

1f47ef3d6b5c66cb20bb4827c3aef5ae63e891cd5fdb49f942420b4f7c81cc4c09a454495573d0880c626cf4db5aa45dd4ab01dea4c4a75f619083c773306eb8
SSDEEP

6144:6iHjMcAvcTPcjO+moBAZXUBgLnLz6sOaM7:6iDMPcTPcjrmQAZXUBgm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
791bf51cdb828f3f95f3c2440d67ad0d_JaffaCakes118

Files

791bf51cdb828f3f95f3c2440d67ad0d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 476KB - Virtual size: 475KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ