dda8b69f765c5af68961e4fe1b0f080e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dda8b69f765c5af68961e4fe1b0f080e_JaffaCakes118
Size

200KB
MD5

dda8b69f765c5af68961e4fe1b0f080e
SHA1

9cf81a4f347a32921778f3276e68366a4a1f2c5a
SHA256

0621043f7fb81a43c1e699b6cec29a6ad308048befa64b3b5b91f0a92e2633c9
SHA512

c09bd4fdffe3b3555a9a05a78f9e01296c74bc27ed2094f4a6529430781e153f22dd350db2dcad37d6fb9fe199097f30ae3e812cd90803f1d80478751bc35092
SSDEEP

3072:PZAcas8sBGKCEk8eIdKTnjEukd5uwSi8Y1qGs:PZAc/8LKCEkLscjEfd5ZfYG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dda8b69f765c5af68961e4fe1b0f080e_JaffaCakes118

Files

dda8b69f765c5af68961e4fe1b0f080e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ