777bcd9959ab656d9bbcf2416717e00c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

777bcd9959ab656d9bbcf2416717e00c_JaffaCakes118
Size

2.2MB
MD5

777bcd9959ab656d9bbcf2416717e00c
SHA1

94a04c1369cfb467dda1d7d93f017089eebcd456
SHA256

fd91dc8a0408e3b1eba1f281b1b92eaddaed369be7eb5ca8b31e80f0de35a8d6
SHA512

789cd0c0ca9eb299760ed1dd5c523db49eb3e611e9d48e9d2a42cc31323483ae05f7ee79f20fa78fd42e8f0dc61ec9d136f82776e72cbc97dbd0b2067563dbfd
SSDEEP

49152:XRy9I+yQovCC+UfkS5CtOTK1uthUexEFmn1iveYnX8Ic1f:XRKI+yQpChh5JK1EEFm1lICf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
777bcd9959ab656d9bbcf2416717e00c_JaffaCakes118

Files

777bcd9959ab656d9bbcf2416717e00c_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dfsr.pdb

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.lif
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE