934294db56b066018084cd15e501ef01_JaffaCakes118 | Triage

Sharing

General

Target

934294db56b066018084cd15e501ef01_JaffaCakes118
Size

1.6MB
MD5

934294db56b066018084cd15e501ef01
SHA1

0098aac562e5e2ad5dfbaa5f7f35cb7bb379bcbb
SHA256

dd1391b7b1be4cc69c2bcb71924b8dfa770b24fbac757c9671ee4c1629703d32
SHA512

642127506b2b42e1eaa31cbd73b68e9a99605adbfdfed870aeeb7216c84fab84f458b185d6348bdf14a6656b2293595e5b0b3391b61ac568c6d697897a78d788
SSDEEP

24576:L/QCdMG02Lx6TCaqwttJ4woCQ9yThQcaUiO/q86yP/XDzliNlQmdKy7Y:zd02sXBtNoCQ8hxdP6KGlQmdR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
934294db56b066018084cd15e501ef01_JaffaCakes118

Files

934294db56b066018084cd15e501ef01_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ