0e4bc719147fdffcf9bda7baf5b8b74d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e4bc719147fdffcf9bda7baf5b8b74d_JaffaCakes118
Size

1.9MB
MD5

0e4bc719147fdffcf9bda7baf5b8b74d
SHA1

690f5521624d41309883581c2a3da717d4720ba4
SHA256

7faf23a3232c09db83a48a4dc3393bc30eec263ff5b8462b90b8470f18d080ed
SHA512

81cd367b8bcb0da6ef302629c418f0800253ab605c8a82ff40f221b865caaf18b3c8bb5e2ed534c92cc164500f3ff21241be611a0f9513c5262ef55433590923
SSDEEP

49152:MffLCp1ASFKFdTNuICVDsmD7lxTFsuB7fz:MffLCp1lYdIICtP2uB77

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e4bc719147fdffcf9bda7baf5b8b74d_JaffaCakes118

Files

0e4bc719147fdffcf9bda7baf5b8b74d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE