d4ddd477c55a2315253094fbfe719f18_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4ddd477c55a2315253094fbfe719f18_JaffaCakes118
Size

146KB
MD5

d4ddd477c55a2315253094fbfe719f18
SHA1

16cd58a9a67e370f6a5d931bdb6a179d48af4fcf
SHA256

95a2b392f197ea09ee80ff5560ab94b4aba69ad7ae470c57a9dd934619d5bd83
SHA512

caa0ae99d0cc0024ccfeb70aa76d2ed390600ef9d533817c79d265ab5b186d273fa92b6ee00615a4a24e260a33dafeeac46dfe191d803e2cb24523732369bbc3
SSDEEP

3072:iiIu4Ww8i1EJuYsLECdgbR+NvQeTBEwzfUJPjO7B1BxCTEQ1ukTe:JIuE7JECdgb6vQeTBEwLUJPjO11Bx6b+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4ddd477c55a2315253094fbfe719f18_JaffaCakes118

Files

d4ddd477c55a2315253094fbfe719f18_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 445KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ