746bd086c4d6129e0b6e2424393e5fc6_JaffaCakes118 | Triage

Sharing

General

Target

746bd086c4d6129e0b6e2424393e5fc6_JaffaCakes118
Size

475KB
MD5

746bd086c4d6129e0b6e2424393e5fc6
SHA1

8900565e2681f7aa33e8eac834bd4526b51d4a16
SHA256

5e5de492a1511af162370fc458bc3bc1af5595eaa80f8afa8d8a5d1d6b546368
SHA512

b4e89027580e84d6146ce60e515690c88d64c7a93a755d3a5ec0c6cbc04999c4158cae7de19597e7497955e31efcc07013eddfb3daef61d962b64fb0d01d75d8
SSDEEP

12288:ScZ/TJ6weWkMMZdQfMMMMMMMMLMMMMMMMMMMx5tgP8c8JWhIdXfgg:ScZ/TLeWkMMUfMMMMMMMMLMMMMMMMMMk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
746bd086c4d6129e0b6e2424393e5fc6_JaffaCakes118

Files

746bd086c4d6129e0b6e2424393e5fc6_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

XPSViewer.pdb

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yvs
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE