01653abbdedd31f7acc1a78a955cdfaf_JaffaCakes118 | Triage

Sharing

General

Target

01653abbdedd31f7acc1a78a955cdfaf_JaffaCakes118
Size

2.3MB
MD5

01653abbdedd31f7acc1a78a955cdfaf
SHA1

da0f86b99b79efcb78f35bd259457b8dc8b8702e
SHA256

7d696e7f3a7e1b1f723bc4d9aa4ae8ffb8daee16c9647947e1b4b32dc8ff70fd
SHA512

ca98ee357120b6733650ecfd4be98c24c7b866bb55e7fd46658aff4125482a67fc3b7d4a82ce548f39d5ebce4c4307adf83e7581bd5b190c7af7ec0e1cf2cd3c
SSDEEP

49152:SNEbNP1ZvI8UgPS3N8rsdosWyClGxkJwFFebA5rOYiZn/:KEnZvRS3NCMoXlykJwFFebSivZn/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01653abbdedd31f7acc1a78a955cdfaf_JaffaCakes118

Files

01653abbdedd31f7acc1a78a955cdfaf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ