d50ecca3a6dcf848610b0503a8652365_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d50ecca3a6dcf848610b0503a8652365_JaffaCakes118
Size

126KB
MD5

d50ecca3a6dcf848610b0503a8652365
SHA1

fb0d51dc5816721948cf36e3bcd9a8c4416ba062
SHA256

4214d6b8ed158075d4c4736f0bc7fc1ac3c2cfcd8fdaaa966e7d4773948444f2
SHA512

8d3f87e03088e95ac341eb6f41dc55452d9a39fef9c7138d6dc9f6af05418680dba872b5957caa31b275840d367a0aa949da6a293c5ab8d3ccaa37a6772ad059
SSDEEP

1536:5KoFTK2evZudaFU9HgbWAB+i9YUfZKwrhPpksXMPzO0u5JGoVI4njWNQQX2DiR1o:so96U9HgCWTYgZKmXclejS6S+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d50ecca3a6dcf848610b0503a8652365_JaffaCakes118

Files

d50ecca3a6dcf848610b0503a8652365_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 539KB - Virtual size: 539KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ