0e68969c64a3570c05269e68dcac334c_JaffaCakes118 | Triage

Sharing

General

Target

0e68969c64a3570c05269e68dcac334c_JaffaCakes118
Size

241KB
MD5

0e68969c64a3570c05269e68dcac334c
SHA1

d1aee2dbd006cbce3302f0be14c7ae5f475c2b2b
SHA256

3565b5d5161d5a95998f34517659bc9a76fc087a8b2efd1b47d41b8db92fa041
SHA512

8de483549e17b16e39894e1ad12537160e2808463ec06f750ad3d4b4fc9cd659a71311479afa56c6aa519c6c1b66ff97343ed4a6d1ee7b3cec30defb9585a4c7
SSDEEP

6144:7ZXEOK99kX+ajTeLEre6/A5vCHToTOt6xYDjKv8UK23Ldtd/Va:7B+ajTLre6/AJcsOIxQDUKK5w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e68969c64a3570c05269e68dcac334c_JaffaCakes118

Files

0e68969c64a3570c05269e68dcac334c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mscorsvw.pdb

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mjg
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE