73b87747b5676ccc40d150770e400140_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73b87747b5676ccc40d150770e400140_JaffaCakes118
Size

230KB
MD5

73b87747b5676ccc40d150770e400140
SHA1

b67443cd0de6ea32f0da617f5d2874849e8bd1f8
SHA256

3ab6752efe71843d926a8860ceff699dfd84358958b874258122c412510b8847
SHA512

cd012eae8c7a3cbec05d5b990025aac145f64341cc777f2976a83fc738fcb3992384b759275fbb56e28572e9bfe9e5b0c25f38b4c75b680053dd4499d41fa628
SSDEEP

6144:tqqDL6jYH6Q1+vXTZjtx26Uml9Auwy/fKnk+1Wrl8+37ui:Qqn6jYaf/Xx/fAjy/SL6lR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73b87747b5676ccc40d150770e400140_JaffaCakes118

Files

73b87747b5676ccc40d150770e400140_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

cipher.pdb

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vsp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE