389f9fe6f62acdf91e7ba9e5e73da8fd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

389f9fe6f62acdf91e7ba9e5e73da8fd_JaffaCakes118
Size

517KB
MD5

389f9fe6f62acdf91e7ba9e5e73da8fd
SHA1

82709c6bfc75f37b21ce88759b60de548624b88f
SHA256

2f438521fcdf95b60351dda9384b004a7b82de5abd3ccbc7a8125406863476d9
SHA512

f506faa17dbfd73591df514ff92f93c9c4fd8bdb0b267314f9f43b7dcf839d6d2302752c00801e8285cbfb3fb53b31b65800757d775f808d0a742b125e4b92ad
SSDEEP

6144:Gnhe/OIaXgTTSjQ47orM07NBU4uXluL/pI9mG21vx8exGn:GnsT74MX6XIL/u41vx8exGn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
389f9fe6f62acdf91e7ba9e5e73da8fd_JaffaCakes118

Files

389f9fe6f62acdf91e7ba9e5e73da8fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

AcroRd32Exe.pdb

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.oli
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE