f059b7dbc310956b462d649ca03d845c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f059b7dbc310956b462d649ca03d845c_JaffaCakes118
Size

779KB
MD5

f059b7dbc310956b462d649ca03d845c
SHA1

4284bc72d1ba7e136ed7da0588133bac1c0f8a46
SHA256

15f6cbd3c167135fe7d53a304c02f3bd6c8085c856f368a2595c85716a5963f6
SHA512

0b32d234800e45461efe2c7fc2d55a49c2e1782622d479e5e04bd19a554cb93e84a5d3a00d4158d443dc6332bc6284e8b163b5b040fd31f285f093f4a583b655
SSDEEP

24576:2tXbvhGCw3zLMEA8pCh5qRIL/LP3WACghnnksTlBc9:2tXMCQxrchDuACghksI9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f059b7dbc310956b462d649ca03d845c_JaffaCakes118

Files

f059b7dbc310956b462d649ca03d845c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.khe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE