ad62d354b3ae2336697f87d9f260778b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad62d354b3ae2336697f87d9f260778b_JaffaCakes118
Size

1.7MB
MD5

ad62d354b3ae2336697f87d9f260778b
SHA1

648ad5930fe076a04dffd787c4eb4bcec91240ac
SHA256

ba82a4e46936d1f3762b4737f08fcc8726a753adb6d6000beb0320db4e2e9a73
SHA512

dfb8f69e232b1b66cfa613f61f2876df2c2ed8657226f68a3787fe328735fb563677af1228bf8c4ea15a19ab76d00ae6026365faec8d8be35964eaed85c0b2dd
SSDEEP

24576:Kr6ktiGn/0/wJLPMB+QeaTMOPxhsbrFLwh/9xlWAUned9VNuteU1lSG0UR5f0zU:lk8OcqLPQMEkMhouZN6laIJ0z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad62d354b3ae2336697f87d9f260778b_JaffaCakes118

Files

ad62d354b3ae2336697f87d9f260778b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 963KB - Virtual size: 963KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 385KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ