06b431d5f999b83012aafea24f87884d_JaffaCakes118 | Triage

Sharing

General

Target

06b431d5f999b83012aafea24f87884d_JaffaCakes118
Size

904KB
MD5

06b431d5f999b83012aafea24f87884d
SHA1

8bddf4bf8d5b47a59d2a524b6066b6b5b2f1325d
SHA256

dadce7bab0b9462c2644e8ed74e8c4c751282ea11a8bd83f4939dd198b9247fc
SHA512

e1742d417e729707ae46349770385dc2c510f6d616fcf38771b0b3f47de3ea18912d89db5e8a0884d32959df1fe2028613abd621d95e976c120b3fde5fac6460
SSDEEP

3072:ft2cWtTBfVkfqM2SCAygRjlIqZoFzJcqM:hWtTBdsqEPxjjoFz+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06b431d5f999b83012aafea24f87884d_JaffaCakes118

Files

06b431d5f999b83012aafea24f87884d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ