d195ae9ed86587e5a16b854339253d4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d195ae9ed86587e5a16b854339253d4d_JaffaCakes118
Size

596KB
MD5

d195ae9ed86587e5a16b854339253d4d
SHA1

ee9fb26b8d57b0b3dbb8f1b0a973bdb11ddb10cc
SHA256

5980af3e94b4da5bb4e56bdfb990b9380f62c00b33e8436e1074693d5b991456
SHA512

999fdbe953f254de340a1a5dc5282b740e03155cf48954ec2459d4e2680e9ac8dcbf97d7676bf6b8141cf85d9547e29a591febda6d3c3dc40e8562d41eb90c25
SSDEEP

12288:vAkYLnWp70ZSET97tU5UIOXOqLalZl3c8E7juq/9:vAjW18T9QOXqg7jN9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d195ae9ed86587e5a16b854339253d4d_JaffaCakes118

Files

d195ae9ed86587e5a16b854339253d4d_JaffaCakes118
.exe windows:24735 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

��<��2��
Size: 3546.3MB - Virtual size: 2426.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�3į��?
Size: 3955.1MB - Virtual size: 928.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

��a�U
Size: 557.0MB - Virtual size: 1294.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��hQ$�!
Size: 2835.5MB - Virtual size: 1205.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

}"<*
Size: 2245.0MB - Virtual size: 3140.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE