39e95494e79912c8dd4faac734c8a68e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39e95494e79912c8dd4faac734c8a68e_JaffaCakes118
Size

82KB
MD5

39e95494e79912c8dd4faac734c8a68e
SHA1

665d9d72359b6924b81a9e99d763f8af494a7569
SHA256

6cf4073d5c743f96db89c8d0a3c64f793a76128f4a87edba628049ca05b1411e
SHA512

409b4848f6a86c7eb35aaf0981ae4aa404ae6eb7b01d70a9bf675c5f9913e7506bac9ddcf62908e8b773ba49e55a139481be98640fcad75f778434a7f66a8c6c
SSDEEP

1536:jDuawPRVGzctGCd2L2isHKXfidHyns6EIs3aW36TFD:+aw3sctGAW2wf1s6ExAD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39e95494e79912c8dd4faac734c8a68e_JaffaCakes118

Files

39e95494e79912c8dd4faac734c8a68e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data1
Size: 512B - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE