39af2559fddbc13720ebf4e7ad425ffd_JaffaCakes118 | Triage

Sharing

General

Target

39af2559fddbc13720ebf4e7ad425ffd_JaffaCakes118
Size

541KB
MD5

39af2559fddbc13720ebf4e7ad425ffd
SHA1

12ce2fd4f8add681984f0705bb9d3bab8f022225
SHA256

b19612cd847499f1d2f583e24640cce2fed2b2d35cc5d55e9283ffb244f78976
SHA512

84988372b5f7dedd6012961a0938b127ab17ca2cc7cac384db613b75a4ea60eed9f98ade2a63baae19f6a906332634ddb69899cc2dbfbb421692eaeaa252bdaf
SSDEEP

12288:NQzP2dWA4EJ4Q6Z2PAJ9qXlmWRF1DrsZoEnvrX:NQzPiR4EO2PAGlma1Drsr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39af2559fddbc13720ebf4e7ad425ffd_JaffaCakes118

Files

39af2559fddbc13720ebf4e7ad425ffd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.edata
Size: 466KB - Virtual size: 793KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ