d505f4f9209d1d8edd21cc81914fd1b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d505f4f9209d1d8edd21cc81914fd1b5_JaffaCakes118
Size

727KB
MD5

d505f4f9209d1d8edd21cc81914fd1b5
SHA1

a4f580229a7341d81ae36374b4799637b1b492c9
SHA256

9b6d433a931b9e7307b52f149057046cae9a1a7ff7461cd19d7f5fe38e09dd85
SHA512

fbb57139fafdb415f86421af8cad24ba0343aaa61ae486b0e2bcdb8fb374d3d07d170e5123e24a20f64c86b3ce2eaada295ca4bc98bc0385df4672f52e460490
SSDEEP

12288:rwECaUglPnFsk7P0UahDyDT11BRXjIjpbt25z1C5:rwEC70qkgUahDuLRst25g5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d505f4f9209d1d8edd21cc81914fd1b5_JaffaCakes118

Files

d505f4f9209d1d8edd21cc81914fd1b5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 255KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ