f97fcc229d20bae904c8f12cc7fe9aae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f97fcc229d20bae904c8f12cc7fe9aae_JaffaCakes118
Size

169KB
MD5

f97fcc229d20bae904c8f12cc7fe9aae
SHA1

8941d427e1f2892e06b7845225a995bd8862f917
SHA256

59399e56b27987c50e4320ef3b805efb8b2d76463f3084becca90830f3c59b51
SHA512

efcf19e8d47788dcc643cb5c38aafb68ff476fed25505a9f4ab8aa2181433e6718550c9c8abb14fc34e65a201412c7bc174621d46f290b2e077a2dabbec63525
SSDEEP

3072:FHTX+OuCniMNrg3Y6udLj955nqZee6aSB3h+rxH1jl2J:R5iMJgIL155nqZeLlBxw2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f97fcc229d20bae904c8f12cc7fe9aae_JaffaCakes118

Files

f97fcc229d20bae904c8f12cc7fe9aae_JaffaCakes118
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Src\64\Client\Load64\x64\Release\Load64.pdb

Sections

.text
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ