7456635d07afe029ac45e67a48298c50_JaffaCakes118 | Triage

Sharing

General

Target

7456635d07afe029ac45e67a48298c50_JaffaCakes118
Size

1.6MB
MD5

7456635d07afe029ac45e67a48298c50
SHA1

120bb0cbf8805ffb12b65be77b8d6c1393fb7b62
SHA256

887baec26e24033bf202b141a0d85f4095900474487ac484870c28aac48ca245
SHA512

08adde10d84bd8b9befd8348ee30881163356bc0785bc52cf6842ed7bb4536e3705ab0d777483fad6c4a5e8422f7cc80a1b40abb7e67210a8ce74943de076092
SSDEEP

49152:yWfmde0IfNxS3/tb8e8SvTdcJavnRBSr9F:paFb8WTdhvnCr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7456635d07afe029ac45e67a48298c50_JaffaCakes118

Files

7456635d07afe029ac45e67a48298c50_JaffaCakes118
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 785KB - Virtual size: 785KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 620KB - Virtual size: 619KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ