724a656a11c9933f0c047e2f702dfd31_JaffaCakes118 | Triage

Sharing

General

Target

724a656a11c9933f0c047e2f702dfd31_JaffaCakes118
Size

2.3MB
MD5

724a656a11c9933f0c047e2f702dfd31
SHA1

a489553d00cc9a462d1f206c5b25f264c70512a1
SHA256

85f77d8b907e77b7e632e4b1d031012713a66101bf98645ffb9b8cd488bdb280
SHA512

8d1b0d9a377acf29b81dd1a5cdedff1b73dce4c92fac9a1bfb6be51d5d10bb15fa8e984f84c60795cac5828bf1dbc1848867614b8e86433c733fcf0876f33029
SSDEEP

49152:LgIeoURc7Ib6SUEqdZN1CXRc52Sfm1/arMdcfvDX4N8kebA5rOYiZnK:LgI6ckbDe/NQyw8j+5ebSivZnK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
724a656a11c9933f0c047e2f702dfd31_JaffaCakes118

Files

724a656a11c9933f0c047e2f702dfd31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ