d3912265593e8997060d1a96485706d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3912265593e8997060d1a96485706d0_JaffaCakes118
Size

47KB
MD5

d3912265593e8997060d1a96485706d0
SHA1

c682d05e913c6d5e27e0b694da411aa7449163f7
SHA256

1b71986d3cc132d6f2898bd681be44e513615c361e06110b4acc7ffecfb53bf0
SHA512

0347841ec4e545d475752483169aa39de46fc108e236ef7ce8dea81b2d0a65de9a9b17e76aad2b9ddead3a1020090cbc619407ad246a9849ebf789fc2813fe69
SSDEEP

768:gvcycMqUWPhJSS7bAUz5ZeNtdzkdMwndTFPizxfhe4v1GiU:DJlZJSSAs8nkxUxfw7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3912265593e8997060d1a96485706d0_JaffaCakes118

Files

d3912265593e8997060d1a96485706d0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 32B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mackt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ