f7a7baba88710698dda2bdf40d9d0bcc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7a7baba88710698dda2bdf40d9d0bcc_JaffaCakes118
Size

68KB
MD5

f7a7baba88710698dda2bdf40d9d0bcc
SHA1

bd93199e87434976ca66f97ee564ae3790c2d17e
SHA256

c88645e6dd06593ad75a9515071f1b214b17cf97725993b18b593192b2e8cd3e
SHA512

2239e7f411393b309488e397cef1f4b9c7cbf3c5a8a721ac34819f947eeba35e3b0767bffa73de208d1dad87ff6062e9977851b32f611fba4ce170354bc61bfa
SSDEEP

768:mBWMey0KSrtBBOaOF+7x7Ee0s4nFcR5RjSdAGNXgD4kBBvsCS:m1/0v5BRrx3CC5RjS6MXgRBBsCS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7a7baba88710698dda2bdf40d9d0bcc_JaffaCakes118

Files

f7a7baba88710698dda2bdf40d9d0bcc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ