d6755cd7f07d5fb60ad78d776fb5b983_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6755cd7f07d5fb60ad78d776fb5b983_JaffaCakes118
Size

783KB
MD5

d6755cd7f07d5fb60ad78d776fb5b983
SHA1

a73f6ab88bdfac4ee70c30c954e42a4c12fb6e1b
SHA256

c59bf703f3008c88bc38d2321fef9ced97afe6b66bb1bf658150222c7625a02b
SHA512

2beffbd4cb13f39005626cc0b8afd2f9168ea7fc9a4b34b0205f2e971f1a9519561bb45f150feefe3a637627f590dab93331eed582ef83823755f9c40d768806
SSDEEP

12288:3NQgew20gC5XHIAIeU7Ns8rb7JsNcYlUmAvZh8fuTWWNwQ0xGEvJ56A:9ww535XADWJ22EWhQ0oA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6755cd7f07d5fb60ad78d776fb5b983_JaffaCakes118

Files

d6755cd7f07d5fb60ad78d776fb5b983_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 706KB - Virtual size: 708KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ