dc9823ca52167dd0a4c36cf6bb83d2fb_JaffaCakes118 | Triage

Sharing

General

Target

dc9823ca52167dd0a4c36cf6bb83d2fb_JaffaCakes118
Size

102KB
MD5

dc9823ca52167dd0a4c36cf6bb83d2fb
SHA1

497d15532351a85eb0445db59586b4da9e7bae36
SHA256

b57f9b9fa680fea2ddf54b3a83967ac9a64c6fa5a843f24aa5d98c6b87e4fa79
SHA512

74b67dc70e030176b05f358f3528909ec560c7e027e2086dcdb54f50d9dfd1d8f486a73d7643ca17f88012289c5be59c7d352c45ce9afdfd8036efde7d853735
SSDEEP

1536:TPwMM+D7tG0ES13Cu45tGiBWfmGimahDG1rp092KM486mZwdf1CklPoinfT1Arhy:3DxGY12p9NVsFC7u6moNCK4hy+Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc9823ca52167dd0a4c36cf6bb83d2fb_JaffaCakes118

Files

dc9823ca52167dd0a4c36cf6bb83d2fb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 234B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE