e772bdd79a2a4f49a560f45a9a73a36e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e772bdd79a2a4f49a560f45a9a73a36e_JaffaCakes118
Size

4KB
MD5

e772bdd79a2a4f49a560f45a9a73a36e
SHA1

f5d6d951b02669cd5f8e84d5ba44313fce3cd809
SHA256

e1a674860872f57814941d4e8108adbba337da07e552b93f2da686f8a86d23b7
SHA512

45d5bf1d0ec35a33378e8e2e3746a8797055b1d9cc593f84d6e0ee6657ceec4404b1a21f89a270551dc3f421981f3ad388d6be31d81ea3141525da88ca3fe7d6
SSDEEP

48:K5ARapnyUDPCphQPJgfLttttttttMT/hB4WWoqmoJ09M4nEWZnGgnQG/ESt8YC2M:CAR/UbJgITMWxqLOQmEgE6Ta

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e772bdd79a2a4f49a560f45a9a73a36e_JaffaCakes118

Files

e772bdd79a2a4f49a560f45a9a73a36e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE