d3caa6db9959bce2302e4520978f6b2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3caa6db9959bce2302e4520978f6b2e_JaffaCakes118
Size

1.3MB
MD5

d3caa6db9959bce2302e4520978f6b2e
SHA1

41ba665bb606347c53815fe6275f73c70f72ef7f
SHA256

9fb869c75853cd3bc1f08bb1b02ff1a4aae5ee78c49251382a62022edfadad5c
SHA512

11425af88aacdb2d94da61bd9a65caab02158d2c178639f10ae14d2826c1a636d4c05db0d4918e55722d1994f61179f0677204062d18ce8e8532576d4c005879
SSDEEP

24576:26aredclUtysfcKDiigBh2B+DS9XjqvtEuALbY:2NX/BMFXj9j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3caa6db9959bce2302e4520978f6b2e_JaffaCakes118

Files

d3caa6db9959bce2302e4520978f6b2e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 957KB - Virtual size: 956KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 392KB - Virtual size: 853KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 28B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1022B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ