0d044c10e9edccdf4bd4b9700f45240b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d044c10e9edccdf4bd4b9700f45240b_JaffaCakes118
Size

247KB
MD5

0d044c10e9edccdf4bd4b9700f45240b
SHA1

94841be09f3b39b2f2746c65673b27d00bc6462c
SHA256

5a81219e055d51a5beacac84bc129a27640d6100deba2caa7fb127befeb85682
SHA512

b47bc598c52bc577a7505ee8396f4265dcac0f6d2d101172c5856c223cfc9441ee128775d10cdc2ce723170ecdca2fe2100ab7a6c8dfa8b5a159f7b2ea6f7fbb
SSDEEP

6144:EYkdsIibePLpVmuv1CNmaztY6JTJMP2ashD61z7g2xloI58IQiv:ZkWxeTpT/ajTyNxBLvoHev

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d044c10e9edccdf4bd4b9700f45240b_JaffaCakes118

Files

0d044c10e9edccdf4bd4b9700f45240b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

TaskKill.pdb

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE