f97d5eb63ccd7d50b6aac2a8f678835d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f97d5eb63ccd7d50b6aac2a8f678835d_JaffaCakes118
Size

556KB
MD5

f97d5eb63ccd7d50b6aac2a8f678835d
SHA1

b4911d645ef89012bfe262bba443a717145a999d
SHA256

4033e6475c65a752e544c826b7a86cbae8142789b195a6efeeb7a0b3aae06463
SHA512

4b92ebf13024c9588063525beec74c38e13f2ecd2f63ccbec0be1b9572393a625596b595bfaaf7faa35e190a7ed4453283a77bf0675d64ea7f7d062b74cb6189
SSDEEP

12288:vyj+i1b+mdSBvLwSP/5teNcIAXbBXr+3+sZO2ZgKdUzSc3iy6mG4P5EuW88knKjR:vYvdOvpJX8gcUzHiPmGaEurdnKjRPH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f97d5eb63ccd7d50b6aac2a8f678835d_JaffaCakes118

Files

f97d5eb63ccd7d50b6aac2a8f678835d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 314KB - Virtual size: 313KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ