c7606847f6c2cb957352809748df9589_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7606847f6c2cb957352809748df9589_JaffaCakes118
Size

267KB
MD5

c7606847f6c2cb957352809748df9589
SHA1

7896744c00747e795f556c31c2adcdb534aeae9e
SHA256

a7dbfc843953ad9759a5b46b5a121dd789901baf7214c44fc75f781ece86d13b
SHA512

c476c597f6720ae3a2063f43bd97eef6ad518b31e2c898a41ba29e4c2dc1ccfcfba579587365be0fc9e9baa27e31191987697dada7f2aeeaa14557da1aa0c419
SSDEEP

6144:8vls6f2r8DljQr8iDa7O5aTY4KXgiRkudzNYziFAqfZ/KA+nHNEM:eddljQAiuOwoKu/6oF+ntEM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7606847f6c2cb957352809748df9589_JaffaCakes118

Files

c7606847f6c2cb957352809748df9589_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 805KB - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 857KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ