90d8b4c32742bd49f0152d27ee404ba9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90d8b4c32742bd49f0152d27ee404ba9_JaffaCakes118
Size

294KB
MD5

90d8b4c32742bd49f0152d27ee404ba9
SHA1

c43de52481d766e519cf96947b32cd8bef7a0eee
SHA256

63915574a3a2eb3b4e7b91a7fd456b5c4247df5d5d8c3328133073ac1c6982d1
SHA512

0b960b9d586a4efefc10ed4ea69cb87c0cdb80756c825d5a7e195fddd9cac1c83b3209c5a0d384473ccde6ef6a780209668e3ada8af3ef3cafd7b3154f65e51d
SSDEEP

6144:6/QiQPziYgBpl7+hCnaTxUKsE9ceJRvcj68xhxXqo7V5/q/hAUfB:CQiGzWlKhC2Iqjzva6WXd55yGMB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90d8b4c32742bd49f0152d27ee404ba9_JaffaCakes118

Files

90d8b4c32742bd49f0152d27ee404ba9_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ