de86bd2b5a331e940c4f5fa7b02c73f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de86bd2b5a331e940c4f5fa7b02c73f6_JaffaCakes118
Size

81KB
MD5

de86bd2b5a331e940c4f5fa7b02c73f6
SHA1

ee7f2785cbfd061ed2b1635c7acd1c686ff5c32c
SHA256

e52d9befe31cd182aab3f688aeec21bd8e4047c470bbdaf10721abf56e71cf0e
SHA512

bbae94067541f286ab0571b6c0493ebdef941c6c84fadc12874821313a816a6ccf3b08bb4e727be89b2012d70428447f10f958b1921ca8a0eccbca017d28d239
SSDEEP

1536:x/ko0m7rlI3MGb9KZY/XEIu4/UiCTGIVYMFsZqGjGSuU0PN4:FkJm7rec2XNc8vjTu7PN4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de86bd2b5a331e940c4f5fa7b02c73f6_JaffaCakes118

Files

de86bd2b5a331e940c4f5fa7b02c73f6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 305KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ