d9c2eb377190c80b258c7fee28f6d35c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9c2eb377190c80b258c7fee28f6d35c_JaffaCakes118
Size

604KB
MD5

d9c2eb377190c80b258c7fee28f6d35c
SHA1

aa646f8f509d2182e6d146c3bbf599ff4c9bc94c
SHA256

aafcb59119b6bac6d0af120c1ea2a8f12ac1aff221a8f5c2b184de381bc3fe68
SHA512

0a78341613df6a8a9c1e374ef2364e3025cb68ed33748969cf135bd7d684d827b2b7203ac4b6b4489ffbf26f3bfad043d25568571101b9643ad1026877b85c9e
SSDEEP

12288:3kJTDBF1d+wwEOcSfFd+tX1ixRqwBRXjIjDlqp:3kJvBT8bFdTRq2Rsqp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9c2eb377190c80b258c7fee28f6d35c_JaffaCakes118

Files

d9c2eb377190c80b258c7fee28f6d35c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ