15a2ffcf8c12bb0cf9752382e323356c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15a2ffcf8c12bb0cf9752382e323356c_JaffaCakes118
Size

857KB
MD5

15a2ffcf8c12bb0cf9752382e323356c
SHA1

7646abd33b9b6e1e29f7c6c0bd2cf0db1fd7a7e5
SHA256

c1d39a03e29599e35def7ff4cf4756be1e8f8fdf661813df926c3aa987ebc552
SHA512

f4ff69b185f27c133023b5172c1a36a9a7217fff14563057ae40c2b1f748c8988a111250eec2a73f998fdfcb9a1933d9e2d7edad07ad5bc2aaf2e75adb27b8bf
SSDEEP

24576:50TQQhynrYOZ/37dwp5/CKEvs/uV8v/mIXu8dFwxgi:2Q2Yr/Ld5ZVCX3Fwx9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15a2ffcf8c12bb0cf9752382e323356c_JaffaCakes118

Files

15a2ffcf8c12bb0cf9752382e323356c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.piluop
Size: 3KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dhfiol
Size: 74B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fanqoo
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ