f68bcde3d46f42c77be8b4d362d95032_JaffaCakes118 | Triage

Sharing

General

Target

f68bcde3d46f42c77be8b4d362d95032_JaffaCakes118
Size

305KB
MD5

f68bcde3d46f42c77be8b4d362d95032
SHA1

3058c633a8e9b3f788fe77525d5f67cb0ad67bc6
SHA256

5f1712cb67f85b3e6a9f5493aaeb9f30c24eb0bc4afa6af395c4aff7054c8061
SHA512

e69ce62fd005a25a6b8836dd850ec5b4aba4b43f308f2c865eb591d76822fbc8301e841ea70aa8c74213bf78e98c800328fc77418d57100e3b71f0a855640c70
SSDEEP

6144:5GSztFT72Y0SjzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOPPECYeixlYGicA:5Gqtp7SSqYsY1UMqMZJYSN7wbstOP8fK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f68bcde3d46f42c77be8b4d362d95032_JaffaCakes118

Files

f68bcde3d46f42c77be8b4d362d95032_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE