d6f0bf44a499f925520f55639f659d3e_JaffaCakes118 | Triage

Sharing

General

Target

d6f0bf44a499f925520f55639f659d3e_JaffaCakes118
Size

143KB
MD5

d6f0bf44a499f925520f55639f659d3e
SHA1

52db080d667200e12a03197ecfd46e09fffbebb7
SHA256

4f9a4b5b5c03d3cf29de3a5d8db43afc61f8e43de331bc0434bf2b926a112a42
SHA512

2bc7007ce2edf251c58771416acaaeedba755206ae556812e8177ce6ffe1e2629ad7232b17b7934bba33167688cd3a4e23778f03a6f35d4f6884f5ce4515613e
SSDEEP

3072:0e6EY/PR1khSlt2g/LKV/KDQxWK0xHZ1NbQ+Yz+i:oR/DUS1DKuuTzz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6f0bf44a499f925520f55639f659d3e_JaffaCakes118

Files

d6f0bf44a499f925520f55639f659d3e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE