f4dac3b9f02c92b260875591385e37fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4dac3b9f02c92b260875591385e37fc_JaffaCakes118
Size

81KB
MD5

f4dac3b9f02c92b260875591385e37fc
SHA1

37eb86ab0924afcf615240bfd3a2d0cfd9633ced
SHA256

867035bf52ee405eaf51cc73a3b2847e2f7109b9c70e4db39dc93b499bc78bbe
SHA512

aba4d22332a595dc0387c6d31e538e94643103b2e66701c894ad18c2698f36f307e3138cba9fedb3cbc3e2b3af799c9e2d0830e7feb1c83f1707bfea559c772f
SSDEEP

1536:KX7a7MDBvvFi3G+7BrdRy+poEFwXO77vAKecN5ISulfFW:KTdjOBrfyKhFaOfEAulfA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4dac3b9f02c92b260875591385e37fc_JaffaCakes118

Files

f4dac3b9f02c92b260875591385e37fc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ATL
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ