df040526c2eab32cb7a468b0729e0173_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df040526c2eab32cb7a468b0729e0173_JaffaCakes118
Size

433KB
MD5

df040526c2eab32cb7a468b0729e0173
SHA1

eefded28f687c4be498a2ad475e385c7486d2244
SHA256

17c5ef065487c4cd452e4122cf489786791ac767a6f0a722ba208a29c45cc42f
SHA512

36b2ea81d45bf637c41691b292cbd13c34bcd368ffd08ba5889df594e2fbce8339cac590be628849201a8ad94e7754713a7ced577af2646d93e8eb2af8f7f92a
SSDEEP

12288:d2Vj6VCTyIJfdpF/7o+9BM4DRO2vslF1ZrnPWC5ppcpqgZw:d2VGVI99l19BM4DRelF/WC5ppcMgZw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df040526c2eab32cb7a468b0729e0173_JaffaCakes118

Files

df040526c2eab32cb7a468b0729e0173_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ