4e10b9cc5f9e32a4c782910b3cefe8e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e10b9cc5f9e32a4c782910b3cefe8e8_JaffaCakes118
Size

2.3MB
MD5

4e10b9cc5f9e32a4c782910b3cefe8e8
SHA1

dfe3e05107a7bdccea95e476d75d4b6dba01cda4
SHA256

96676dbb157049f54c35275c960dfb087d1ff119e7709bc5b11074b45e997e07
SHA512

fdbad02e0b49266f4e9e3ce40e9f5d4b36d906dff3fffc79e350b2a66f2fe06c3363bcf0f18322588564c61bbe329b15e70f107d415ccb254cd061b53e47b355
SSDEEP

24576:zeCEizxamQQO2Nr9Z3hb1eLhhfT7rmLtUJ8Um20wV6r0tn/1pdAoSwPXv+5:zeozxamHt3543fnrmLSJ8CTS/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e10b9cc5f9e32a4c782910b3cefe8e8_JaffaCakes118

Files

4e10b9cc5f9e32a4c782910b3cefe8e8_JaffaCakes118
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 674KB - Virtual size: 674KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ