b745ed898e596dd140518bd1b376e439_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b745ed898e596dd140518bd1b376e439_JaffaCakes118
Size

699KB
MD5

b745ed898e596dd140518bd1b376e439
SHA1

8d30c636be158aa03f11e7bd6af8350e0a7be0d8
SHA256

a4580c7da5149facb22973fb33a8cf716f645810a6215ab0d0f86db7604ae95f
SHA512

6ba667514fe768ed772771b2e34c4d5aacfbdd2bed1a4c0395c1c6c3577d6215a2f6fcc2737074eb71d1d5ffad81888228f19c78a2d2e292fc2ca51b1c287e63
SSDEEP

12288:ndyH+dDQqRZHTdn807yX9Z5BRXjIjL5cHVcqOX:ndKqRZHTd8RNZ3RUcHkX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b745ed898e596dd140518bd1b376e439_JaffaCakes118

Files

b745ed898e596dd140518bd1b376e439_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ