d51c130c44865785c58b0054be5fedce_JaffaCakes118 | Triage

Sharing

General

Target

d51c130c44865785c58b0054be5fedce_JaffaCakes118
Size

165KB
MD5

d51c130c44865785c58b0054be5fedce
SHA1

9dc4396f4c10e184df745eb10b771aa3440a81a2
SHA256

68e5a665edbf875ccdea3b9fed5bc3f44ec8523b3440a4f24f716b3ef072c64b
SHA512

f673a7185823276276dde88e85ef44950ac8b5c0603784f73d192af041e56009b98c48a9b74a48e58879ca136af054f7393db2cec6c3e137e7600281d2aaa0d0
SSDEEP

3072:jOYPwSWUPe7D97+1iJa9QThgT0Yb+cffYGR0ReGpmLkLZCjo5NI:jOYPwSre7D97+1iJaGdgwleHI9pmLpjb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d51c130c44865785c58b0054be5fedce_JaffaCakes118

Files

d51c130c44865785c58b0054be5fedce_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

3Bks8oye
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idat_96
Size: 45KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 250B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ