d9fdf01e6b0b7a90178edd7c5de41624_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9fdf01e6b0b7a90178edd7c5de41624_JaffaCakes118
Size

46KB
MD5

d9fdf01e6b0b7a90178edd7c5de41624
SHA1

9d2d27eebcee1dce02000ad04703c06b9736b8c2
SHA256

1dc7e7b50880e622175131f7d5f4859d47db3e7e7ae66642b0e118efb2a066df
SHA512

84fbcaf01790c500a6a545c2e82adb2ccf19de48b0600b4a043bac3a15fd8e0140d18e98fa9bb9e48c1a5000b862e0799dd34be97736ce576a3ed9447ce18383
SSDEEP

768:HFosnMIo3dR9uuBap2A15rfe+TMqt7Ir0+gk9CYQ9fxJSf24raG2vy:HFordiv2CNnAqt2Lgk9hKBcR2vy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9fdf01e6b0b7a90178edd7c5de41624_JaffaCakes118

Files

d9fdf01e6b0b7a90178edd7c5de41624_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 453KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ