d5b1d1845832a5758ef30d84ef85260b_JaffaCakes118 | Triage

Sharing

General

Target

d5b1d1845832a5758ef30d84ef85260b_JaffaCakes118
Size

714KB
MD5

d5b1d1845832a5758ef30d84ef85260b
SHA1

4c171b8fb73079bfc4eea7f6c2d8056529493263
SHA256

4fe361c61c541ccbb7eb97df50733544ec209ecc37794c08f655bc9f1022c9a5
SHA512

3ab157cd70af56425328133b385be33d16552838cbca8a8652ba3f4c4184e3d3c004a37b46d6943a84ba66edbb976d048dabaf2dea5f39a6d7b4ad430e982bd9
SSDEEP

12288:PsygFeF8v9WtDo3gsEoXYkTPkW/BRXjIjTJ6jYAb:PtnUYtagsEoXY4kIRO6jYo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5b1d1845832a5758ef30d84ef85260b_JaffaCakes118

Files

d5b1d1845832a5758ef30d84ef85260b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ