d55203e904b3a980d06879a6f11748ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d55203e904b3a980d06879a6f11748ad_JaffaCakes118
Size

106KB
MD5

d55203e904b3a980d06879a6f11748ad
SHA1

91b5a38862d91f90c6444d9c3abc70c29fcb7ce5
SHA256

a9e2241ec1d1ae85880fdc811d9b81c7356473533bb9f632935c66f06c94b198
SHA512

6c0afb770ab5701af512c677c69bef303abe22494ef07573bd2ff58d5dec42f10187be047a2c0606ee822a721b938f2dce64870f99a565237102fda1653a57c2
SSDEEP

1536:mtMwx1jSAf5PjRYHPLw8UTTPKi770hPogjggIhyW5UHNPqy2Cevt1m4eQEvI5j1L:mBjXPdYv0TXP9xiE5j1Pj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d55203e904b3a980d06879a6f11748ad_JaffaCakes118

Files

d55203e904b3a980d06879a6f11748ad_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ