d39180dee758b7b2c235a02d6d432b35_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d39180dee758b7b2c235a02d6d432b35_JaffaCakes118
Size

238KB
MD5

d39180dee758b7b2c235a02d6d432b35
SHA1

40eeece347b6fe8c2260c2244b9194f76be255a6
SHA256

2018bd21491289e1af6958cca26f9c3d7665d62709f4c29a5b6887604f5c338c
SHA512

311ec8a5e59eff829a9bcf1de4af833c6323cc7aceda92340f6d527e3192b2bcec6fcb320ad360032ca9c5c1ad25927314d8d5f8628a788d55f0f5dc8ab6b6d5
SSDEEP

6144:giBhtdotaLNg18ZadgoBvjC9/x6bwU+S+z2RvsoTdqxxWc:giBhtdvUvj65Xz2VsoTdqL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d39180dee758b7b2c235a02d6d432b35_JaffaCakes118

Files

d39180dee758b7b2c235a02d6d432b35_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ