f48bc7cf9078e80ee1dfbf8b55d6cd59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f48bc7cf9078e80ee1dfbf8b55d6cd59_JaffaCakes118
Size

90KB
MD5

f48bc7cf9078e80ee1dfbf8b55d6cd59
SHA1

167e42e38a5be3b5b00eaaf5acf924f9083eafe9
SHA256

e829a95a53b3830d63802f96c45a61aace8a27ef9f4a0fe8b7dc5f562e3c65c9
SHA512

946db5e7482ee88b79077ee387a0fc3a323b72834173541d7428ec821c241f19e5b2e678f17cb3a799fdcd3448899e68307e5bb11fb9e1931e87d503bc5995e5
SSDEEP

1536:Bj8BLypAx3k6zk8eBBEZf/hwLPQL4IMetf9cDjDkkF9:sJ0BBEZx0P+v7tfMjokz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f48bc7cf9078e80ee1dfbf8b55d6cd59_JaffaCakes118

Files

f48bc7cf9078e80ee1dfbf8b55d6cd59_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ