76faef19c38bc12b1daa442d18d9244a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76faef19c38bc12b1daa442d18d9244a_JaffaCakes118
Size

5.4MB
MD5

76faef19c38bc12b1daa442d18d9244a
SHA1

f82f151e8370750fe0909795c0b4373a4ca85cf1
SHA256

efcaf0549bee988446a9d8bfacf30da7433217059e3ef5b7cf3965afbdc72b3f
SHA512

4ae45be86d0ef8b500e1326902d92fca7943c6d9065cf66849e51aecc062901726e18a35346a703a3bda152d9b2a1873571a754b557fb638a3216e96257842f4
SSDEEP

98304:04MH2EiICsDUWrCPGobIaLHQzQUq25/0H:0b21LZ6CPGobIUyuH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76faef19c38bc12b1daa442d18d9244a_JaffaCakes118

Files

76faef19c38bc12b1daa442d18d9244a_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 242KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ