f0dfb8f23104de2d40105439d9529ca7_JaffaCakes118 | Triage

Sharing

General

Target

f0dfb8f23104de2d40105439d9529ca7_JaffaCakes118
Size

125KB
MD5

f0dfb8f23104de2d40105439d9529ca7
SHA1

cd13f5e584860ee0739b7bf032203f43b435176d
SHA256

bd9e6a89e7075f6d4ccef9019c3b1a2215088b21c010762807a8f20c69f8cf22
SHA512

a9ac616f38eab35ce77e3e463972157f10d69092896dd62b5b3556b5aa37e13b8d3885dfa41c737c56ec0d458e7827ebd936af9f8d68ac8bd0335ce671e83313
SSDEEP

1536:oWm3rscK60RadsF/0G3J2teRaqYd1N0xSeI4tXyjmRczM1AOhK5WP0ecCrib+cJS:oVbsc+RuY02o0k4tiswOGWcerriic0N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0dfb8f23104de2d40105439d9529ca7_JaffaCakes118

Files

f0dfb8f23104de2d40105439d9529ca7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 76KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 21KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ