dc66dcb6295aa064cf2660e409bcc71f_JaffaCakes118 | Triage

Sharing

General

Target

dc66dcb6295aa064cf2660e409bcc71f_JaffaCakes118
Size

367KB
MD5

dc66dcb6295aa064cf2660e409bcc71f
SHA1

8eaf34dbcf6cd72e0677f21ccc43c16355e6a197
SHA256

5215242ee41f3c3bfa748dd1bf4c197d95d1b478c60a7d2b1fd88ba09e19ef22
SHA512

36bd294a1263465ab65196f1c972472a3810610400e4d5ae3ce47bbb494c1cde1c2da25b8da5aa3d81d6e85cd58f937dac280d57bcc07e9a520c9177697e9219
SSDEEP

6144:rpEcAd/Mm5ZkyUneRTnJOmQ4W4/6zA5K0TzJRCp4xRvKUllD/W13+b:rTAOm5eyUnJmCzAXTzJR3RvK6lCwb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc66dcb6295aa064cf2660e409bcc71f_JaffaCakes118

Files

dc66dcb6295aa064cf2660e409bcc71f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 205KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ