d1076a1912633e02b8911461f38094f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1076a1912633e02b8911461f38094f0_JaffaCakes118
Size

2.3MB
MD5

d1076a1912633e02b8911461f38094f0
SHA1

36bf82d5343c2c90c5fa019d465cd4cb8d2913c7
SHA256

b530011b2be24c93815f1fe4663e908ae461f6bf1b215326592def64b179f7c1
SHA512

2cbda95269762a6a8d6a06c6c1bade21d2e60405c57d1636113290dbeffe519db6afedcd9dd895155e3d7e9817de0a489c2feb508a1471239918dc5576304fb9
SSDEEP

49152:vqfrwnqjLZ5REqQum3nCqAQ/vEEvLD9uzo16rqfbI:vqfr8qjV5REqFsCwv6mfE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1076a1912633e02b8911461f38094f0_JaffaCakes118

Files

d1076a1912633e02b8911461f38094f0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 700KB - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ