9664994b1bfd9ceac98062f8fd4feac8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9664994b1bfd9ceac98062f8fd4feac8_JaffaCakes118
Size

23KB
MD5

9664994b1bfd9ceac98062f8fd4feac8
SHA1

ebd6b6ea7c4d14a794099611c8f1ff69a839a421
SHA256

90b1a9f5774b563f6abdede736a700edd99b015adfe7075e491984caf5a69e1e
SHA512

4f7559645a08f9ca762b4fddb6ea6768ec191d70a5bb38c2509c89f7270748bd383a4a9e2f99a4d128b6f698775d73569c24121e0145e33b1c11cba62901636b
SSDEEP

384:mT5aRIlL2tHJ9qaO1ZUlxiOGgVcer8zGzOCIIegB7YAYisMW7NCYh:mdh8HJ9XEoxhGgz8zGWIegB71b+7NCk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9664994b1bfd9ceac98062f8fd4feac8_JaffaCakes118

Files

9664994b1bfd9ceac98062f8fd4feac8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 19.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ