72aa6835d0ab99a2e0303b77cc65e98d_JaffaCakes118 | Triage

Sharing

General

Target

72aa6835d0ab99a2e0303b77cc65e98d_JaffaCakes118
Size

134KB
MD5

72aa6835d0ab99a2e0303b77cc65e98d
SHA1

f9037015bb603e244b63b1ac89b0947a8340b8d9
SHA256

13ae9ea10d5dcbacad599353983f028c6b00d1897acb1cf5685063406381bd6d
SHA512

23768a107fd649d2fa4bbf7fee710cd5c9f85e74bb65a17d34d47fcaf5210496ef233a926758799e3ac8e88b92f6c85c440cc8bb06a56ff37b122f85735f15fd
SSDEEP

3072:RPY1lfQ9VDBFYahullSGq+pzN3yDKd2f/i:GeIaszYS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
72aa6835d0ab99a2e0303b77cc65e98d_JaffaCakes118

Files

72aa6835d0ab99a2e0303b77cc65e98d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE