d050737ba5783673142da45ff521987e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d050737ba5783673142da45ff521987e_JaffaCakes118
Size

6KB
MD5

d050737ba5783673142da45ff521987e
SHA1

3a47e9b68f83d3e78e526ef34afe2422c399cbe6
SHA256

07aaac257f6fdb5c4060722ef297e0c0e06c24861740014f94f4541c7eeb7279
SHA512

d5cd497fd119048880d97378943b0ac569d04c48c3c7f2b56538e7bafa81c8a3be786d2864b06ad338b20f519c4204d23505fce81962dea77212ab0638e475e9
SSDEEP

192:ptEUVlc/OpKjl4IzP5juJYA4iWsCSZDICF:7EUVlcpT75yJnWsCSl7F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d050737ba5783673142da45ff521987e_JaffaCakes118

Files

d050737ba5783673142da45ff521987e_JaffaCakes118
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 599KB - Virtual size: 598KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ