d3c5f14f8150fbe70b770f74b69068b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3c5f14f8150fbe70b770f74b69068b2_JaffaCakes118
Size

389KB
MD5

d3c5f14f8150fbe70b770f74b69068b2
SHA1

12b904327ac079c60ca5911773113b923aed17a3
SHA256

0ad58f3dec1c3535c0bf6fffd4c7f0e0758ac6998decc9d4824740c23c1502f0
SHA512

efa86b11371383ab498c42388e938cbf2b87206699f54788de9ae1bde019513a0e00c66d1638d0ccd827034b82252468dc7ee39d51f6472be4ef9dbb6f6d7897
SSDEEP

6144:sPU+w8ZvqzdAZy4VybEMNJeZwWHzg1saJ/JF01iCKG6:sspo04EEMNJsw2g1rJTei

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3c5f14f8150fbe70b770f74b69068b2_JaffaCakes118

Files

d3c5f14f8150fbe70b770f74b69068b2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 312KB - Virtual size: 744KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 72KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE