694df2b7beb0dbb3a1c43415a62153ae_JaffaCakes118 | Triage

Sharing

General

Target

694df2b7beb0dbb3a1c43415a62153ae_JaffaCakes118
Size

2.3MB
MD5

694df2b7beb0dbb3a1c43415a62153ae
SHA1

2dbf78bfbb0f92f9f0f11d6f008f0cf61a522915
SHA256

87febc2fe89752d506fa1928ec8402dcfc89b8aa713e5a796e3539d51f69784a
SHA512

1103dc209df60baf2cd2e0bc5e2480c534999e0b33496a6ce0a424c9b233d3fe3db5fda02a769c13275e913835fde9bff09af12c76ef72f765a98909cd1379c5
SSDEEP

49152:s9k5u66thUoJseHdZEV9KctArIh1jJqI7/i+3iBQ9FebA5rOYiZnf:RJ6zXJ1nOk7rEqmViBUebSivZnf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
694df2b7beb0dbb3a1c43415a62153ae_JaffaCakes118

Files

694df2b7beb0dbb3a1c43415a62153ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ