04d658a497832dc98ae9b5eb7f16fef9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04d658a497832dc98ae9b5eb7f16fef9_JaffaCakes118
Size

5KB
MD5

04d658a497832dc98ae9b5eb7f16fef9
SHA1

7541dbc62f2f65986971d9e0cc0072d94cfafdd8
SHA256

db5f429569d1cb763b11a3e9338ea017144095a6fa41712252e438b0a9095813
SHA512

30835a8cb6eb9eca6e86dd62f89cfd893250430ea6c18664603af29a89def31f7db0164eccc22b7ff5e97b06d2b755668b3c298aec69963821003719ea6a000f
SSDEEP

96:ZvBuqaaEecJO9ndiT6VThkdq+UfmlFeeWZV:pBuqTcJO5AWVThmmOFxWZV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04d658a497832dc98ae9b5eb7f16fef9_JaffaCakes118

Files

04d658a497832dc98ae9b5eb7f16fef9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.8MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ