dc3d688c8212ab7b63b59a9e6a6af475_JaffaCakes118 | Triage

Sharing

General

Target

dc3d688c8212ab7b63b59a9e6a6af475_JaffaCakes118
Size

368KB
MD5

dc3d688c8212ab7b63b59a9e6a6af475
SHA1

5abe99f628c7bbb2f2697d21d01596a38620278f
SHA256

39e12a8b6a88d712c9ce7b24cfd35dbcddc599827992adfccc2b71693683ee46
SHA512

0848055c8cc35c7b33f79e6090207c22d640b05afccf9e12036d0fbc18e85587bbad9f517f8a12daf54d35835da96ca05b8e542e80389511fb90424e104b7de1
SSDEEP

6144:211rg9/dHIm5gx8ISWIrPTka9ZhuGQT2+LwTdSv+qEMxpASjTnrp:2c9/um5i8ISpkcxeAF4xpASTp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc3d688c8212ab7b63b59a9e6a6af475_JaffaCakes118

Files

dc3d688c8212ab7b63b59a9e6a6af475_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 206KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ