74897242a9b4f5864459bfcfa607a0ef_JaffaCakes118 | Triage

Sharing

General

Target

74897242a9b4f5864459bfcfa607a0ef_JaffaCakes118
Size

1.2MB
MD5

74897242a9b4f5864459bfcfa607a0ef
SHA1

02a95a57219f2ab60d89ec8b683f7db25526efd8
SHA256

e106a03346a912669cd56f0fd50a436e9425f360308efb09508f95b54f264eef
SHA512

47138185146167622a4ff853a061b4b062d28e7df995fca1888fbaa41600636fbd7fd7d851886e450682017b44957020766421199fb53c79821c30f09719214a
SSDEEP

12288:hvSbJxPRC+XQSxb6Dc7RwIWHeGL7GOKA2F/8x/E9H7B6GnCTA/JISr+0vsCZMSK9:kbJV8kVxb6Y+rodASUy97B3MYRr+EK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74897242a9b4f5864459bfcfa607a0ef_JaffaCakes118

Files

74897242a9b4f5864459bfcfa607a0ef_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

calc.pdb

Sections

.text
Size: 331KB - Virtual size: 331KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 394KB - Virtual size: 393KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata2
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hhound
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sxdata
Size: 438KB - Virtual size: 440KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE