432c9ded1908fe0e9e44d76c53d00b45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

432c9ded1908fe0e9e44d76c53d00b45_JaffaCakes118
Size

231KB
MD5

432c9ded1908fe0e9e44d76c53d00b45
SHA1

127a800771d5a3b4365dc06767ba724f963065eb
SHA256

139d20b4ec98e04e82c8677521848885fb083df05ce975cdf3322ff760c26f8c
SHA512

96bf8b6d240f25d28b897fe413ef8d8cb321f6c98f72b5442e01c400db8e4553ba72e37496b4a6659c6e68b63b1d13b53bfdf45c8316cf4c951928b5d7466375
SSDEEP

6144:i9LfRV7tshowJ+dnXhYk0P2+ma+9gn49aNrM:i9L1Zhi7s9T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
432c9ded1908fe0e9e44d76c53d00b45_JaffaCakes118

Files

432c9ded1908fe0e9e44d76c53d00b45_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Project\MiniTPFw\MiniTPFw\Release\MiniTPFw.pdb

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rol
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE