d5d4fef2bd591d4659b23979a9b61fa2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5d4fef2bd591d4659b23979a9b61fa2_JaffaCakes118
Size

12KB
MD5

d5d4fef2bd591d4659b23979a9b61fa2
SHA1

4acfd3b1b4e5b7de83675f8c9daeb672b4d5cd5e
SHA256

42f214fef6804d15cb97b2a3ac7d9b1c932f54c6e7efd42754a1d9cc3f44676b
SHA512

7f791fd11165121f1635dcec81cc271c7aa3570e24cd39284e5e49c0bebe7d3c163df3973e09d8d548bcd1cd59486d911dfbd202f0c08a031cbc841d536a77d2
SSDEEP

192:98IY4bsSwt6B9s7Ow3Ak8/Wi/UXvL5a47ly16qeqF0VD5BlnpSO:98IYCsvt9fL8WyZ4JyM60DnMO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5d4fef2bd591d4659b23979a9b61fa2_JaffaCakes118

Files

d5d4fef2bd591d4659b23979a9b61fa2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 302KB - Virtual size: 301KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ