840185515b63a3b6aa8d36b8dc37f327_JaffaCakes118 | Triage

Sharing

General

Target

840185515b63a3b6aa8d36b8dc37f327_JaffaCakes118
Size

655KB
MD5

840185515b63a3b6aa8d36b8dc37f327
SHA1

713f3a211a282be989aaa47feaad88aa14a007ba
SHA256

f2cd621738652305a9f5e1c73bccc2701fd025b3176854fbd60010c9a65b5d78
SHA512

59d9e823fc13d3eff581a7fb24bd83547f55c72fedd80c16d566c48a220593236ca7dda575af4a39cd433fef767218423a1974983d54a8659a4c110c9ddbb49f
SSDEEP

12288:KUeV8omU1LHqZzw6Dve7KlK5wjwedud6+ELKjoDCwEZz+4:LeV8OxHq667vKevdp+E2joDCwEZz+4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
840185515b63a3b6aa8d36b8dc37f327_JaffaCakes118

Files

840185515b63a3b6aa8d36b8dc37f327_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 30KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 773KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ