756404d90902a1cb2485e2b99ad48ef5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

756404d90902a1cb2485e2b99ad48ef5_JaffaCakes118
Size

63KB
MD5

756404d90902a1cb2485e2b99ad48ef5
SHA1

50a8634a109800042c0bd7bca5dc53caa43dfd22
SHA256

fefd73d575a9f928abbd0755889df4e0fd3d0b73392cf88ae64e9a8c0aea168a
SHA512

96c7fa93ef58321b4bbcdcd819d618bd210f95a113bb1599691bdc0da07787702de3877e55986f274fd630803767ff075f1117fc0c937c06afa2762c1ce413e6
SSDEEP

1536:+gYPhQXwIiPrrjThO+lUBrzCxry1ec7rUyj2j:xYP2XerzhOUxu/XUj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
756404d90902a1cb2485e2b99ad48ef5_JaffaCakes118

Files

756404d90902a1cb2485e2b99ad48ef5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ