154249ffdfa692499040f96027a09708_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

154249ffdfa692499040f96027a09708_JaffaCakes118
Size

203KB
MD5

154249ffdfa692499040f96027a09708
SHA1

bfe40172f767965906f735c66559e4f432303a30
SHA256

9f282df91c684ed8630c4fa9f0de00ceb9132ede5d6fc20570768f2d550e9547
SHA512

a18feb267d3b52931da957a27fa5080eb55a4c3f26381aa2215e7c164c762c12f279ebcc0b23460dd34ced69d1bff42fe22d7be8eea25d04aa9f3157f813d50e
SSDEEP

6144:fHt/a6M9EFcNFGk07ot6lTU3nSX8L4oKiOH7:fNC6M/zfy8Gg3PKia7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
154249ffdfa692499040f96027a09708_JaffaCakes118

Files

154249ffdfa692499040f96027a09708_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

iisrstas.pdb

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gda
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE