de6d3f47c14065d1df3f457174324d24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de6d3f47c14065d1df3f457174324d24_JaffaCakes118
Size

459KB
MD5

de6d3f47c14065d1df3f457174324d24
SHA1

d2f48fe6a6eabe71f7fa8aa91f404d428679b2be
SHA256

632a9a6b902a67570fa7e9dd0d88c32e85ba457e3c1ad94fd2fc344fad707ceb
SHA512

21c97755c92ce48d03f36ea1777756adab4671beec5488613fcc89d12d637e03028d8d3603dc31fb341cdf32fc34af875d84fe83c3ca5dab9ca813d43f5de016
SSDEEP

12288:oEerclzRCayeopvGNzM6s4D8e8FIBK86dNvMXfAo+I2i3F3YS97p/7WUxpCOEOY:oENsI2uFI+pTk1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de6d3f47c14065d1df3f457174324d24_JaffaCakes118

Files

de6d3f47c14065d1df3f457174324d24_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

browserchoice.pdb

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 269KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pmj
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE