07583c9c9f3ffb0e4b4b4d6aabcfd908_JaffaCakes118 | Triage

Sharing

General

Target

07583c9c9f3ffb0e4b4b4d6aabcfd908_JaffaCakes118
Size

559KB
MD5

07583c9c9f3ffb0e4b4b4d6aabcfd908
SHA1

17c635fdfd54e9514bd3693bc6488de65f7427c9
SHA256

54792fe31cea9afeaf083025a63642dc8ed4afabbdc547de2e96f6eefa844a9f
SHA512

9c9d5d94be7fca2dc0d093f0f90165373cb5b30adc2c4c81f657c9d5c69f75882e0d66e4d4206bd764b0cb4427f4523b24cafbab402fa40d4b70b1820ae3907f
SSDEEP

12288:9timq3y1+xUNSEJi3RU3utm8NvR2syc6KqvOR2dY4+z0v:/imHACYMi3CWvnyjKUCiJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07583c9c9f3ffb0e4b4b4d6aabcfd908_JaffaCakes118

Files

07583c9c9f3ffb0e4b4b4d6aabcfd908_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 234KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ