8d43569e57691992900528f879fd3e35_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d43569e57691992900528f879fd3e35_JaffaCakes118
Size

389KB
MD5

8d43569e57691992900528f879fd3e35
SHA1

650540b3b4aee165e220571a45ae04eaec0137ac
SHA256

b7ba7886773db1538540d80182ec92eb8250921864bc9e507e22e8487e4d79ac
SHA512

d272cdf7f16453efb2685385035f665fbfcc8c23227cdd2690dadd904ee54b59b3af9fe659b2ffa73ddfd294bb90fa8913673e954cd64f56a1034ce41c5dd649
SSDEEP

6144:5jQVf7Np3KYD85/KMU4sxMQMTE53oEhrOi8Wx+HZ4J:aDDUKMU4AMQn53x9xx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d43569e57691992900528f879fd3e35_JaffaCakes118

Files

8d43569e57691992900528f879fd3e35_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 312KB - Virtual size: 744KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 72KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE