dfb42be892c3c42e996dfe6a54bf6e10_JaffaCakes118 | Triage

Sharing

General

Target

dfb42be892c3c42e996dfe6a54bf6e10_JaffaCakes118
Size

16KB
MD5

dfb42be892c3c42e996dfe6a54bf6e10
SHA1

567886b470b63d45a8943bf2191ddf08fa198970
SHA256

4dce09cd66244e6cfc0656824957eb0d4c466e122e71ecf94ca60a517d130fde
SHA512

593e8f7aab4a94e576b817a05e468d8351aec32a1776dae8ca8b5776eeaa403c27e3c186de61a25abe4d7620b3ba86f7f0d1a62b15c33403444fa475fe4bd047
SSDEEP

384:AJy1PvlcfU5sYBGQ148xIFkbLRDVy/n/N1lnFY2HVmj:Oy1Puo1BGQ14+RLRDI/n/vjYj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfb42be892c3c42e996dfe6a54bf6e10_JaffaCakes118

Files

dfb42be892c3c42e996dfe6a54bf6e10_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28.3MB - Virtual size: 28.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ