66e6adf0710c822ffd418bd203015517_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66e6adf0710c822ffd418bd203015517_JaffaCakes118
Size

246KB
MD5

66e6adf0710c822ffd418bd203015517
SHA1

8d079d3534ea3967ee8b00a124185d42761453c3
SHA256

15978b36ad56ada592a0f1829d58fd75ad516beacc9f0bfac0378b6dc83c4374
SHA512

710d6b5c624549e9497d5b714317df73d40cc7114deeccef0bca81b67f27d75a525fa9eddf768283323d935d63a76963ba3be85d0699924c938cc43e88677d72
SSDEEP

6144:b7Jm+oOgr4k/86Hp+s3XZKNBTvcy+776K:blgr4kl+aYvuHP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66e6adf0710c822ffd418bd203015517_JaffaCakes118

Files

66e6adf0710c822ffd418bd203015517_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 203KB - Virtual size: 582KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE