166843e2b527c97b27d0964691db2d27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

166843e2b527c97b27d0964691db2d27_JaffaCakes118
Size

81KB
MD5

166843e2b527c97b27d0964691db2d27
SHA1

0aefcddf1dbef312ccdbbf0b8ef9290e5e455f62
SHA256

5d2904ddb50bac8c9efc540fa3a68fdc76eb99bd5ff3ee3ff2a7da35df2f905d
SHA512

7ea594f5b66fae13e6b62670fc6e6d6c5165834b2b2dda2968557c667e7acc410686a7d0fd47bea626fc0ad4c6506307de1874b84c69f500fa315f7dc0c6198a
SSDEEP

1536:em09dMHfmJZA18ScuXVSKxG8IBcEBZgl9Ncv7drBy3dAJMTw6IQl+:em0/MHx8SrXJxG8Sc8Z0NSy3dAJM85

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
166843e2b527c97b27d0964691db2d27_JaffaCakes118

Files

166843e2b527c97b27d0964691db2d27_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Fixit_Run_Elevated.pdb

Sections

.text
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ