1471ec0f37cc228a791f21673e7a9b5e_JaffaCakes118 | Triage

Sharing

General

Target

1471ec0f37cc228a791f21673e7a9b5e_JaffaCakes118
Size

31KB
MD5

1471ec0f37cc228a791f21673e7a9b5e
SHA1

2315fa0f25947a90b1cda61e013c927913a0879a
SHA256

197beca7b88f28974136007f4aa4f1487b9698f66b2259c990aa8c16fa4274ce
SHA512

ab9bd4b9dc3fd680a4bb1b8534a62d2ffe8725bfe352055823a348a88b045c3818923f3e1494ea6a7117e782267676296afe7862c0cceadbf0a0e56842dac61e
SSDEEP

768:/EG7SoBNv1IuY2kitA/lVVA0TyrJzr99VyyKlL7SSi:/nBNOvQA/LVA04Jzx9cyYSV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1471ec0f37cc228a791f21673e7a9b5e_JaffaCakes118

Files

1471ec0f37cc228a791f21673e7a9b5e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 292KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 395KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ