f9fb2c2df29f8639960c725b4914cf0f_JaffaCakes118 | Triage

Sharing

General

Target

f9fb2c2df29f8639960c725b4914cf0f_JaffaCakes118
Size

213KB
MD5

f9fb2c2df29f8639960c725b4914cf0f
SHA1

7f67e3f8fb44c19c672d3b579115da1fa688f982
SHA256

d84470e484bdb370f2dccc1de4a9781b54c0320c22545e4a573c8482e6df3a04
SHA512

bd0e8e9a78c84dadbf244891beb3f372ad42a1efb88bb244a9db364f3edd70b7cf84e156477814d6f7c804e03df12ad5f2d79e0f43883c95bcc334ea2260726d
SSDEEP

6144:MIuE7JECdgb6vQeTBEwLUJPjO11Bx6b1uEk4x+0CWzefb:MOJ1e64eTRka76b124J1zab

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9fb2c2df29f8639960c725b4914cf0f_JaffaCakes118

Files

f9fb2c2df29f8639960c725b4914cf0f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 445KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 503KB - Virtual size: 503KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ