140ac99e9f809222e72af96d223b903f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

140ac99e9f809222e72af96d223b903f_JaffaCakes118
Size

283KB
MD5

140ac99e9f809222e72af96d223b903f
SHA1

8f0b4c57d77eeb53fb50a76b9974bc335f6cba29
SHA256

10ab2c3e9e953b2fd148b633774474e0ef481ed9f749d25b5635740775176276
SHA512

6cd091e0680d272949c44f9f5cd3245c3c6f106c0273cb304a1ed15adeda0d6d2a7e6450fa10b541204571efb0aff7e61521b6969700f4d9c26a8e18d93f23ad
SSDEEP

3072:OWmQKxTmkdIzusT+Rp/goM4DKHQBPmmGG2q7qWV1kZXU4y56c3LZAN6QQvpc/8vX:OB9IoM4m/RPq2iE26c7ZAoQL4kcQm9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
140ac99e9f809222e72af96d223b903f_JaffaCakes118

Files

140ac99e9f809222e72af96d223b903f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mspdbsrv.pdb

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.khe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE