957fdd3fc080277fdd52f882b90ebb80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

957fdd3fc080277fdd52f882b90ebb80_JaffaCakes118
Size

422KB
MD5

957fdd3fc080277fdd52f882b90ebb80
SHA1

12652c9cc84e66a5a78ac9131d3384e530265ff1
SHA256

a9988debb02d2fe0f21de6e9bb28f9e9bac434d340c4a72468a7328f42618ce5
SHA512

946e64fcf1c1a36898beb4851513e1f75c186f026ad3637d1c4d6257928e4ab33194c43a7c9628eb54d9be7153519da027c5f5474cc4593f262652eec1534dc8
SSDEEP

6144:ykB1INZdWaFzaE7mDGg7Y4+MFyBPys80G5sEOi9Ri9na5UVx3:ykBgdW/E7mDGg8xMkBp80GiZa5UVh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
957fdd3fc080277fdd52f882b90ebb80_JaffaCakes118

Files

957fdd3fc080277fdd52f882b90ebb80_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ