f285674d556c0c4df3a87dd6c44ec461_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f285674d556c0c4df3a87dd6c44ec461_JaffaCakes118
Size

11KB
MD5

f285674d556c0c4df3a87dd6c44ec461
SHA1

20332348c33fc9a7d0f6e75c7d493e55c585f4e5
SHA256

e0e186167a00691cb853fa7aa77957f980f23e53eee866f6c7621490b5e11a21
SHA512

f611ddb2286a9e1147cbce08453f5f5f0ef2b3b89d58f1de43f860a0581206b484d9ad6637ce40f9597fda138307d1d860edd1072e8af72eb9e914ff52e76734
SSDEEP

192:E1ITuHfLsYDUxh8uCxdu5oWXrA4xYJMkiqpwOgKzFUHd/kXSWPIhW/f32gozZdg:EWcLsc70czJ8qpw+zFUHqXSWPIhW/egR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f285674d556c0c4df3a87dd6c44ec461_JaffaCakes118

Files

f285674d556c0c4df3a87dd6c44ec461_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ifc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE