284bda2ad3a0ee83d2612fc194dc0ec9_JaffaCakes118 | Triage

Sharing

General

Target

284bda2ad3a0ee83d2612fc194dc0ec9_JaffaCakes118
Size

51KB
MD5

284bda2ad3a0ee83d2612fc194dc0ec9
SHA1

5c763bff05f110d9c81ae809accbc5745760a75e
SHA256

be2534063c6a23f3337506550c069478c4af3b57f0834a307c77e537d6249fd7
SHA512

d4ce647677712f8171e070d3715b1c5ce38bf8ea8ab3f77509611f6e62d383825890d93502ea1ebe36329f71e5de90299a942f29041fbe6616b83690c86793d2
SSDEEP

768:y9gGNkXMDl+uxEOFn6gTQBloOKpugxwklxmOkRiBki275oqdncksPpJG221e:y9JNkXUxTXUBlorpECkRLnakkJGl8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
284bda2ad3a0ee83d2612fc194dc0ec9_JaffaCakes118

Files

284bda2ad3a0ee83d2612fc194dc0ec9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 417KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 611KB - Virtual size: 610KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NiWnzPD
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE