4412d7e8324a34c7ebcba99632db382d_JaffaCakes118 | Triage

Sharing

General

Target

4412d7e8324a34c7ebcba99632db382d_JaffaCakes118
Size

370KB
MD5

4412d7e8324a34c7ebcba99632db382d
SHA1

9a679d60040b361f778c4f7f29e85985874fbcdc
SHA256

7939b4efaeaf58ce2ccb0247c44158309ca4f120eacac0f26f33080b8e2de141
SHA512

b951001f585ad2d6d4a7cd5e73bd7ac686cf61ade6e5daf9f0e6f3b610805af7f2cd4fd96a60ac759cd34e22fb5cc8d0d018532f9e0a1bb29efc4b10db6c1297
SSDEEP

6144:M7SiyaVn+v7HbTUG9X6i4jC2z0GHsMtobF2L5J8lGq6Iq55e/yoVW:M7JyaMbHUG9Vn2IGHs8o0/8Gq6NiyYW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/560_10.exe

Files

4412d7e8324a34c7ebcba99632db382d_JaffaCakes118
.zip
560_10.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 79KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 36KB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sfx.ini