00f1e4db3d04147c98b24a65ce515457_JaffaCakes118 | Triage

Sharing

General

Target

00f1e4db3d04147c98b24a65ce515457_JaffaCakes118
Size

393KB
MD5

00f1e4db3d04147c98b24a65ce515457
SHA1

436b8f12e4961a5011105ff91dbc41bd1f683005
SHA256

5f3f6bbeb1cd22dabaea348cc6ec3cdaeadb545fc0d21eaf03bf008c511768fa
SHA512

7163b7f903dabbb37ed6a63b1873a610b12bead0cca423a93a4fab9b2ab143d155e461e211bfb3856fc20f1a44e28262d38f97a8d37c6516169db9188163cf0b
SSDEEP

6144:iXcQ5Cjhv1EmDsNABDy1QbfcltPuSRUcN2U02e+bLjJoxGq6IEJPw9aCt:iXcQslvaABVbfcb2SmA0X+fFYGq6jlO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00f1e4db3d04147c98b24a65ce515457_JaffaCakes118

Files

00f1e4db3d04147c98b24a65ce515457_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 100KB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ