dfc859fa3cd6290377bbf09a7bfe7ad8_JaffaCakes118 | Triage

Sharing

General

Target

dfc859fa3cd6290377bbf09a7bfe7ad8_JaffaCakes118
Size

657KB
MD5

dfc859fa3cd6290377bbf09a7bfe7ad8
SHA1

7064503d46bdefe1cb1bc0aea6131cd439d7434c
SHA256

5687233df554ea8876b4aec4395648f4293bd9af64010107a00fa156d1c3293e
SHA512

a68d009fe262b777ecd339253c1d6c058e85a618b6cf34c9aa4b42d58d1ebb2d619a4f151c9e5305f7f9b96ed84e90162f2139f0c01518c7241b252ada82c362
SSDEEP

12288:ni+kG/5RwYkK19iOCr+TMoO30mYn0YaAsGlQrxM5DKTrH5GZ42T:3kGkK19iOCr+TMoO30mYn0YaAsxrxM5/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfc859fa3cd6290377bbf09a7bfe7ad8_JaffaCakes118

Files

dfc859fa3cd6290377bbf09a7bfe7ad8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\gh0st_new\Release\Loader.pdb

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 611KB - Virtual size: 612KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ