d436933fbe865d035c2acca8254f9480_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d436933fbe865d035c2acca8254f9480_JaffaCakes118
Size

196KB
MD5

d436933fbe865d035c2acca8254f9480
SHA1

22c82c04831daf0f6427e5f0abcbe8fb9b1ab69e
SHA256

8a1a9752a6aa56af3374284a5a6d52df50e47b97bee209bbece601bae2ece297
SHA512

39288f390c2a688cdeb2541b53167b896dae4329f5ff7bce3365df462df453722ddea23049f4862e9afabe3efcde03332e3b502b23d8f0dd4fb4fdb2e46bf5fe
SSDEEP

6144:oNZ9z60jJY3S8UW5ZwIrjvVfBxNi5DE7Srqk:eFjJ8SCHFrjvVBx4iOWk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d436933fbe865d035c2acca8254f9480_JaffaCakes118

Files

d436933fbe865d035c2acca8254f9480_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

{Co)(*,
Size: 317KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ