d6b05801b38ccd895778440656a034e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6b05801b38ccd895778440656a034e8_JaffaCakes118
Size

80KB
MD5

d6b05801b38ccd895778440656a034e8
SHA1

e2c1d782c0e8ead0b462cbcd310e22c9218be17a
SHA256

96bd469b7d5870d543910428264c135dda08967e3dc45867227e93444b6aa99a
SHA512

8b96ee8b13566cf9d256b42d94b7d812f4dbcedf0db47c7e34146346fdf77d5da7de1d40d00e7b30475302432c2a0eb02d0ed9a08f2de31e6fcdc74dfad771d6
SSDEEP

1536:JwgVnhHKs5/D7erwBPe9rR3EWFP/KNoHxzUUsSP6:JwAnhHz/DKr4ebEWVKMxJ/6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6b05801b38ccd895778440656a034e8_JaffaCakes118

Files

d6b05801b38ccd895778440656a034e8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ