d1b67c5c489b6d5772e9779c934b4b6d_JaffaCakes118 | Triage

Sharing

General

Target

d1b67c5c489b6d5772e9779c934b4b6d_JaffaCakes118
Size

47KB
MD5

d1b67c5c489b6d5772e9779c934b4b6d
SHA1

994c1483799cf12ed5eb8747c894eb66762ea55c
SHA256

0cf377f8239beb10b1cca648d51f86cf6ffbcf36f12f4aa5a776169c9f830c3d
SHA512

a679f1e4a908849842294cf9a59503827dc0fb74b4afbd29ff72ad268c9f8918324e25cf5fe3b928964da30f24dd7a28b9cf1b24eef0d2852c58197d131b9dc6
SSDEEP

768:p7Nrgw9hTJeQuQCp9MA2T1dP0m6Gb73h9lMo94SnXXnXXnSxDzVjXenXXscr2xr6:ptgw9FJ9S3Yz0nGb1nMomSXXX3cDpze/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1b67c5c489b6d5772e9779c934b4b6d_JaffaCakes118

Files

d1b67c5c489b6d5772e9779c934b4b6d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.conf
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nah
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE