97fd2e616cf2d82f406eca1d5924ec2c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97fd2e616cf2d82f406eca1d5924ec2c_JaffaCakes118
Size

492KB
MD5

97fd2e616cf2d82f406eca1d5924ec2c
SHA1

d777659c18d21d52765651cd367699b15487ba6d
SHA256

0b308cc2ee429581a2ec648827e505e5d01d043018f76c413bc1e43fd5c62931
SHA512

03e6de57f7b92a5f2a7575c51be02893795a6bb1dd8b81ebbad1314d7868413046e03b68fd2ea52d79643e88b277d330ea5c0f00e3da19fe198d52af4f98fd44
SSDEEP

6144:mzjxYMdqmx4rVgzR7eprnp9yLyRRXcUX2vSMsqny28WtPF4TyHkeHpR:ksprnp9yWRRXzl28WFFrx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97fd2e616cf2d82f406eca1d5924ec2c_JaffaCakes118

Files

97fd2e616cf2d82f406eca1d5924ec2c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ