d11aaebbc52b7e836132b6314f24d648_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d11aaebbc52b7e836132b6314f24d648_JaffaCakes118
Size

6KB
MD5

d11aaebbc52b7e836132b6314f24d648
SHA1

00688c8629eaf2d72fdf929b32429b10efaffbd3
SHA256

22a3088c537000aaae8c5aad9607c680751c10a51eeb776c3a560413e76436b0
SHA512

a3ba06d11794e4ef38b320f29585a4abe5b889ae017ec377f2512ec97a4d2e1a995bcea8f967d073f8c53634171fe11c0d40801ca71b45824970f5b394e28bb3
SSDEEP

96:xQ4x24BwPjtFUrVoepniqxE7VAD4gDRaIK1hKkQVsrikPbr6Qc25Fc2cy:PxEFsuexib5AMgdhK10nVu2QRFc2cy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d11aaebbc52b7e836132b6314f24d648_JaffaCakes118

Files

d11aaebbc52b7e836132b6314f24d648_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ