d1d10d3b0d9bbe0633a7b876205d244d_JaffaCakes118 | Triage

Sharing

General

Target

d1d10d3b0d9bbe0633a7b876205d244d_JaffaCakes118
Size

1.0MB
MD5

d1d10d3b0d9bbe0633a7b876205d244d
SHA1

8d0a653d3e7dbcd0d25d0ecae50cb5bd8f92f056
SHA256

5cdcfac9d72766452a91e255833c227c14fda7b30d3124aaf165e4c1224bf09f
SHA512

c11824a3b082460f53a376740d83ed328fd515cad3f29df024907036f178a5a3009030f21a7bcc8a9651886c9d2d37e9e34bdcec51c6fbfc45283ed8372a1859
SSDEEP

12288:ww0cfEonIu6zO2jR4gwjX+0ZdDKR+2pIRMhdAsDnGLMRsCy+f7ZtdzZ8aDpj9tBc:nfbPDk4gM+0qQzGAGkIvt7Z7DtBc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1d10d3b0d9bbe0633a7b876205d244d_JaffaCakes118

Files

d1d10d3b0d9bbe0633a7b876205d244d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 603KB - Virtual size: 603KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 270KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 150KB - Virtual size: 564KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ