11b69c323ab77e1ab68f9229050e8022_JaffaCakes118 | Triage

Sharing

General

Target

11b69c323ab77e1ab68f9229050e8022_JaffaCakes118
Size

1.1MB
MD5

11b69c323ab77e1ab68f9229050e8022
SHA1

7b5851690d0990f153c05013d2b0424eaa42d9b7
SHA256

d741090c8cfe1d2f1f9fdff41430235c04da7e532bfdc3c1ca82bd463e46dd3a
SHA512

7a31df175bb760a48abf7f53e62ba4047c856602ab7384cac58dd87d635615785f3b20ffd751a6f7e89c29fe0ac0f65a87fd11923a2cbc857de2dbfa660a9a87
SSDEEP

24576:SypW9SgLNZaOdcTMuUvxIgI3tl2prXZ7psbmkmwOgRNbjl6Shv8:St9SgLNZa6xIaprX5pkmkDVbjlzF8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11b69c323ab77e1ab68f9229050e8022_JaffaCakes118

Files

11b69c323ab77e1ab68f9229050e8022_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 324KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 748KB - Virtual size: 772KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 676B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ