dfe849b357ed606f292e0cfa72ae35d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfe849b357ed606f292e0cfa72ae35d2_JaffaCakes118
Size

3KB
MD5

dfe849b357ed606f292e0cfa72ae35d2
SHA1

eccc1d5cd4346782ab2553e77766d0421434a5bc
SHA256

7059817926f0493df6e6d99a71c3d24eb41732f526390db3be08591fa0e70a94
SHA512

41173956d849f38956ecd41429927be427f4308b6adf3164f6ca753d0bbda78400ad3c0cbdf8537ba337e40ec015c13a0031bbb8b92e7586e0a92ce2fbaab886

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfe849b357ed606f292e0cfa72ae35d2_JaffaCakes118

Files

dfe849b357ed606f292e0cfa72ae35d2_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 385KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ