d53b30e16baa95ba9a438f648bbd91b3_JaffaCakes118 | Triage

Sharing

General

Target

d53b30e16baa95ba9a438f648bbd91b3_JaffaCakes118
Size

301KB
MD5

d53b30e16baa95ba9a438f648bbd91b3
SHA1

6e424da84d5e51726948ebe539513b7b68a9fd69
SHA256

6563676a6e564ecb6b9956582463f50f1e12dec283854194a23c0b723a2d7f3f
SHA512

32905ca78683f52e37b2991c96f27c238ca675ed9c71f022dbccb0fa2acfdaf6ea06793322f30fbb37892d536882bac390a5aa9cfe76e2971f24cbb52d6a5593
SSDEEP

6144:BtuIDebxqdSzpWPu7g/Hc2dwv/rCPCE+nPTzojQNHJCO/ZUDfQ6w6BumW01QO:BttDx8kt/Hcmwv/rCK1nCQNHJHwsmumH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d53b30e16baa95ba9a438f648bbd91b3_JaffaCakes118

Files

d53b30e16baa95ba9a438f648bbd91b3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE