f0794a7a3c4e0e1b76a704b196b46a67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0794a7a3c4e0e1b76a704b196b46a67_JaffaCakes118
Size

749KB
MD5

f0794a7a3c4e0e1b76a704b196b46a67
SHA1

da406eadbe8948ebd7a6080dd78cd0e2033b31d4
SHA256

1348a1777afb881509a4880babaaa8fe196a2c5f6a91dc32fb2452b9991940d2
SHA512

7f613a606bce135420b5cac67ba4c3b368fba242219803a14d6275fb4296d97982b6b5d9518992026a5e2598d85d89fba1c7883c2e1574ece79b7bf946c1d9d0
SSDEEP

3072:19PsxXjGRHifzT8tznpNh2RPdjGjH5WD/HFC91u1:4jTwhOPdGWrCA1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0794a7a3c4e0e1b76a704b196b46a67_JaffaCakes118

Files

f0794a7a3c4e0e1b76a704b196b46a67_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ