dfe484bc81391347bfe726a10af14dfa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfe484bc81391347bfe726a10af14dfa_JaffaCakes118
Size

172KB
MD5

dfe484bc81391347bfe726a10af14dfa
SHA1

f6506780160271be27564347bf91ad9848282c76
SHA256

7066873327d6776d0e25677b906d89d0375d0826458428065bdb379947a48fd5
SHA512

34164812931c54e4ea6eeb948f802d301b875fca6e9ea094d94aee4a27017d7b7838becdb6fe3570d2918bc1c65af41946c7d03e337d0a026b6bf7afba85e543
SSDEEP

3072:FKHUJTCxOVuiqz+f6n3HIt1rDeuzZUeMTWihG2dZXtJhNHyn9MC:80JTYA2q4It1vewTPU37NSn9MC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfe484bc81391347bfe726a10af14dfa_JaffaCakes118

Files

dfe484bc81391347bfe726a10af14dfa_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pe2
Size: 100B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ