fd99e4a0d607277c7209d6134404065c_JaffaCakes118 | Triage

Sharing

General

Target

fd99e4a0d607277c7209d6134404065c_JaffaCakes118
Size

56KB
MD5

fd99e4a0d607277c7209d6134404065c
SHA1

c4b94d8969f8ecf49ef65c00430e151557607b73
SHA256

913829bf3b4c0fd6407241bc612781c6f5168647ee7ace51f999aeaa10e6e254
SHA512

c24d892ed4df45268adabd4fa1e4c77e8f5517254009f352d7a9142620a7f4c59b2034092de2ef2a9bd632e9ab767725214999a8b329804745464dfacc82a4d7
SSDEEP

1536:zVO4rBBKUJ8k9px3rVrNyvg9ZPc1qBc7+Ca:ZBSiv3rVrNyvgT0mc7+Ca

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd99e4a0d607277c7209d6134404065c_JaffaCakes118

Files

fd99e4a0d607277c7209d6134404065c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 658KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ