d3b9643fc8707c4ede3aee20f9e0a705_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3b9643fc8707c4ede3aee20f9e0a705_JaffaCakes118
Size

709KB
MD5

d3b9643fc8707c4ede3aee20f9e0a705
SHA1

ffb9ddcd6828a3a591a75beff7be4a2fd68e3ec0
SHA256

d633a2f73ad5c25e6371e0b04a74dda88da234da4546b45bea0d94e9a3b1e87c
SHA512

0cccd05393c591ad906582f949bbfd4bd70fc019a333fe5973a068db8c0f2f416c978e8e61947366d4dfc157a0b13e91c9f3b0ecd093981f726e593714de1a5e
SSDEEP

12288:pD8JH9Uo47uLQw8soXYgTtUoGsBRXjIjf5c/uu9aEi:pD8JZKw8soXYSUorRAc21Ei

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3b9643fc8707c4ede3aee20f9e0a705_JaffaCakes118

Files

d3b9643fc8707c4ede3aee20f9e0a705_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ