d6e4f5324f8fe7cb3623e7180f6c9cd4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6e4f5324f8fe7cb3623e7180f6c9cd4_JaffaCakes118
Size

668KB
MD5

d6e4f5324f8fe7cb3623e7180f6c9cd4
SHA1

3b37e96dea1b3d5c0f3feb2ccb31a95965550f75
SHA256

b54ff63b3240f2e6c285b2952758954cb3f29e0629dd2e3c9af13989a361af9a
SHA512

1e0155ececaaf1892a1c05b4d6027bd1c7c884cbb792f7c17362ef4339bdba2567c84304011bb3f3abf24a696ddea87f4a6d5e6ec72c765bcee215f3b0d83af1
SSDEEP

12288:ekJTDBF1d+wwEOcSfFd+tX1ixRq/BRXjIjDlk4rT33Vaq:ekJvBT8bFdTRqZRsksDVaq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6e4f5324f8fe7cb3623e7180f6c9cd4_JaffaCakes118

Files

d6e4f5324f8fe7cb3623e7180f6c9cd4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ