00706bab597fd5a8d988e6720ce99f91_JaffaCakes118 | Triage

Sharing

General

Target

00706bab597fd5a8d988e6720ce99f91_JaffaCakes118
Size

125KB
MD5

00706bab597fd5a8d988e6720ce99f91
SHA1

fde85c7095ebc4b870e7a8d47d68c8fbac895648
SHA256

b7862c8aa4e736c6e05c933195ae676366cba794f0031633a3360f61842a4459
SHA512

0f4c83858c5217bec543d4d09a9db7bc40f54f082da3c5a7f09bd188bae9f5f61458358ad1bc2da54eb9afc23122ce394f9c386469b79af58befd7dea0302fe2
SSDEEP

1536:E7ppNX/feQjpWbqX65p163YC1gKV3CLaxi9BhiIeolE/Wwy:EleQjpgqK0I4rV3Fxi9DiIeolE+R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00706bab597fd5a8d988e6720ce99f91_JaffaCakes118

Files

00706bab597fd5a8d988e6720ce99f91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

?PatchCallBack@@YGPAXIPAX@Z

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

stxt774
Size: 4KB - Virtual size: 443B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WYCao
Size: 13KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ