d6fa47f52c1dc966327f869f0ebba833_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6fa47f52c1dc966327f869f0ebba833_JaffaCakes118
Size

305KB
MD5

d6fa47f52c1dc966327f869f0ebba833
SHA1

42b65ae5fe4128f29cca27e37c0b02d1fe4090e4
SHA256

b3907896ff269ba0f040a6939fdb05f0125ee3ff6a5c2ce6a7e3671c29b7ce0b
SHA512

7db147a4d29131c50c70d8bcdca30e67a189f6552550616579070174e3e4db536472d57a6207471b7d21912d2550bdbe7d451913ee41bee67c07810b503116e5
SSDEEP

6144:s9qHDNXUeHFT6CRTy7wzFzRODpyUOr2//y2TnLo0Dm:4qRUi6CvxzKy1rc/ysM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6fa47f52c1dc966327f869f0ebba833_JaffaCakes118

Files

d6fa47f52c1dc966327f869f0ebba833_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE