a304e76bfca925d521934c67c3f2648a_JaffaCakes118 | Triage

Sharing

General

Target

a304e76bfca925d521934c67c3f2648a_JaffaCakes118
Size

122KB
MD5

a304e76bfca925d521934c67c3f2648a
SHA1

effbe70882224480b4905a1a6f8867e165266101
SHA256

6bb4f7b217fa108f6d218aa8acf1c7ca741577073009ed5d265003f05fc09fcd
SHA512

33bb6c102248887d17ab84d00a0f2589e367eb5b5bf5117cce9210dbf2ebb52d19a4826552e57261af1a7d008f76789e2f735319c1cae636cf70d6a4e51466f7
SSDEEP

3072:xDQgcUSa5TPj5H+TzomgTkJoiIBMIVEgIwYAoQIww4G5gN9oHVtl91NZ1FcXxQ8y:xDncBa5TleTzom1AWt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a304e76bfca925d521934c67c3f2648a_JaffaCakes118

Files

a304e76bfca925d521934c67c3f2648a_JaffaCakes118
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 540KB - Virtual size: 539KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ