aed385964ea75cb5e824d106b9886f41_JaffaCakes118 | Triage

Sharing

General

Target

aed385964ea75cb5e824d106b9886f41_JaffaCakes118
Size

780KB
MD5

aed385964ea75cb5e824d106b9886f41
SHA1

3911611d54e5ee9b8de8247ae4f687b830e00e43
SHA256

722115a96618329636ef19bb2b6c9469023f89b4a1cd06da7f64e2c3d91de03c
SHA512

8ffd85b6b56ba4d607013b30fd121fdd46409ea5c90bb1c19a7ec2e4fc8112734f54b23b4d1aaeae4d2bed67ff840ad725a76be4199c0f67797d344021933efe
SSDEEP

24576:V3BTr3lD/ty+xozBmTp1A8tYTcxqePxTDTj:V3Vr3p16BmTpGcYTcFNL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aed385964ea75cb5e824d106b9886f41_JaffaCakes118

Files

aed385964ea75cb5e824d106b9886f41_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

icardagt.pdb

Sections

.text
Size: 550KB - Virtual size: 549KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE