da6eab77f1bdb939252c4d0bb2adb976_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da6eab77f1bdb939252c4d0bb2adb976_JaffaCakes118
Size

1.1MB
MD5

da6eab77f1bdb939252c4d0bb2adb976
SHA1

caa1d7d5b2ab69b2b9cd5dbe2ff06094e5abdadf
SHA256

5bca7d9a51c89962f5ed5a0132d5b3527e9c994739146642f769cb6e6468e645
SHA512

ab15a545aa74cecbe5ca51338c90ac7cfa353a6118d6475e49056c8a8a961be801b8c66c47b52a74245d7546315180193e92ed3b4a89cf22a4cd33bc31ce2320
SSDEEP

24576:pNsXIVKZ/TSH4MMukXZDi+ZM8nyizdwN/R0MXy+o9Mo:HNAZrZBDi+zhsp0vGo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da6eab77f1bdb939252c4d0bb2adb976_JaffaCakes118

Files

da6eab77f1bdb939252c4d0bb2adb976_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 724KB - Virtual size: 724KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ