dd71ecd19f73c00816586ab39263d420_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd71ecd19f73c00816586ab39263d420_JaffaCakes118
Size

14KB
MD5

dd71ecd19f73c00816586ab39263d420
SHA1

c6e027f232c6dfc5aef17104990df5f656163275
SHA256

18529a84d480c0ece6f20a26cc3370057bbb684c23fd3b1161bae17917c6258a
SHA512

f224f31a52e48cac2eba2f4e28452a7989a7e7586268dc1dc283d103ff704bc9303adaffc30f6f89efe25c6266d44209d47e2b3accbf83b9674af05d804eb5f0
SSDEEP

192:g83RNjwqx/Y/eRXqSfdQgtbEyaqlnZ3iOlm0buvPZuxk7oZ7XYfAsNo0gu9BBO9g:g09wCoAPdiyHN46unZgd7IfAsN6Kzr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd71ecd19f73c00816586ab39263d420_JaffaCakes118

Files

dd71ecd19f73c00816586ab39263d420_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 671KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20.3MB - Virtual size: 20.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ