d6a23ca1760d7a5b6d61dddba9965d21_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6a23ca1760d7a5b6d61dddba9965d21_JaffaCakes118
Size

919KB
MD5

d6a23ca1760d7a5b6d61dddba9965d21
SHA1

3d081076464f2174d0162cbccd285d8ddae7904d
SHA256

465904a6273bf6e1338d44e9ea35e4cefaf6011067b798093030f3c4b2bd3566
SHA512

dba853ff1a673c0823385b8aff1582802be6b93eada457835d0f60528bf0502af9e51a9805f5c0c65d67682e6e4dba431be88830707d9f1d1468d3b6e68cfb6e
SSDEEP

24576:O2chXEgYJoRNNTQQ1ldiVTzqiCZ+8Pg5Bk:O2c4onl5epzqiCRPg5Bk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6a23ca1760d7a5b6d61dddba9965d21_JaffaCakes118

Files

d6a23ca1760d7a5b6d61dddba9965d21_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 369KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ