97352a1c0596dab1858c460635bf85dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97352a1c0596dab1858c460635bf85dc_JaffaCakes118
Size

64KB
MD5

97352a1c0596dab1858c460635bf85dc
SHA1

81e3a791d3ecc22cf0436ef75c7990222b64936a
SHA256

bac4f00eb1f935b86c5d807b0e2e65ac3bf8a71e62b41abb69d504c7199fe2c3
SHA512

67e3cca0b869eba075c116cb51505b209843d558c16ffef6ef5bb13de8285819576126fac712319843baad72e08d8b640b701d44b28287e8fa9bb35b92bff8b2
SSDEEP

768:RUsW0cxc2iQ3kU+Rfm+ND7t4mdG6psludzmIfr6iSQSpi+mmMx3Nr+35kMnp6pNC:OIdjRe+V7tcksluBmQU8rw+xKcy3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97352a1c0596dab1858c460635bf85dc_JaffaCakes118

Files

97352a1c0596dab1858c460635bf85dc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 445KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9.1MB - Virtual size: 9.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ