JaffaCakes118_76a42bb576975563810a632cf1e1a389 | Triage

Sharing

General

Target

JaffaCakes118_76a42bb576975563810a632cf1e1a389
Size

670KB
MD5

76a42bb576975563810a632cf1e1a389
SHA1

4b0dc62f1a95e7d65e51076e4e39d8f446a47132
SHA256

803f562049bf60882169b62fb2d0d83fc19876fd528d6fcd695d5961246e1660
SHA512

d1a44801baeed7c62841c6bd0dcadcbdcd09d8454fb2da5fd17efa0f9d84ca03b4a7836954ee5185430743bba531102a862e73675e054dc42fe4ff09f1c7c447
SSDEEP

12288:33TdtLW5WIj1YSSdFx06+TcgCFXBSXyMzBUWb9lx/9AgHLo8OW+rBj:HDsj1dEIQXBcJ9nPx/igrp+1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_76a42bb576975563810a632cf1e1a389

Files

JaffaCakes118_76a42bb576975563810a632cf1e1a389
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vc++
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

. rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE