07614c11d49c6c0b0499175d3acbea18_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07614c11d49c6c0b0499175d3acbea18_JaffaCakes118
Size

295KB
MD5

07614c11d49c6c0b0499175d3acbea18
SHA1

5bfa47aac888bdc1108e3ef2cfa139fdb9e26b09
SHA256

d637a91011d50a4f0358c2a32e67541da4bdf2e73e260168fc21adbbec96379f
SHA512

0d28443cd6ba1f5e33839a80f395b9257aee9e6f4753e1314c39a48be1f9f8dae7fccecdabca84b0eee8de25b3cd65ef7cb834ba04dccc36968d01d95db7e0c2
SSDEEP

6144:F6OySxbpcrxMb/l7K86gD+bW55zbMLdO5LmlDMMSX0:FryS4rxg28/75Zb2c5LmlDMF0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07614c11d49c6c0b0499175d3acbea18_JaffaCakes118

Files

07614c11d49c6c0b0499175d3acbea18_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE