072d10b766794d13c6e576b6129122c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

072d10b766794d13c6e576b6129122c4_JaffaCakes118
Size

225KB
MD5

072d10b766794d13c6e576b6129122c4
SHA1

ca9f6c625bb5ada75c08aa35cc87b54e7ed60eb6
SHA256

9cda4a1a70abf6ce8db2077418de8c96f8e009250680d30910af24b50fc439bd
SHA512

432c48025848f86c2e6030c79234b65edc9b04b2486f4a9ce811c0100e9fc58e06642fa3fe41c36415abad152b09a2896857585dc31dc5c445aa319b1335883c
SSDEEP

6144:AQKm3fIQvpJLFPQII5GROSmHUm2p5mXiBlkd2hRphsS2zI:/zfIKWI3RO22XiBKd2hRoHI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
072d10b766794d13c6e576b6129122c4_JaffaCakes118

Files

072d10b766794d13c6e576b6129122c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ