f9eedb7ebeece9320d42bbc60652210d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9eedb7ebeece9320d42bbc60652210d_JaffaCakes118
Size

893KB
MD5

f9eedb7ebeece9320d42bbc60652210d
SHA1

94578bca7f0a6b5d9343662af83ec9e2b509c1f9
SHA256

d81f45fca9e9cad6da058c762333de6beee3a62dfe8996e7e0972e953268383c
SHA512

2f40544de095a0d441643bc9a59eb35b63de72a33a3beb668f6e03bd42641f52fd55cc2598982b9fb115b98eed6b29af693ec32313834eadc064b9410938f8f9
SSDEEP

24576:hOPdqaNUFYCmlo89LBoKKiZtmL/DGiW0oDqgGZ9fZFEhVtdriMwBVces:kPtUrmlvLBoKKGjiW0KAZ9fZkVGBVcd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9eedb7ebeece9320d42bbc60652210d_JaffaCakes118

Files

f9eedb7ebeece9320d42bbc60652210d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ