1723c20897f06facdd1d59d38a5a7153_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1723c20897f06facdd1d59d38a5a7153_JaffaCakes118
Size

2.9MB
MD5

1723c20897f06facdd1d59d38a5a7153
SHA1

83b571ce347c8275c6c955059666468221a2044e
SHA256

d0729d49d807ad7731ff2710d446877496f33c89539c5f4478cb743ac45bae70
SHA512

c0e1c415fa1f1770f7d5497543ace0702ae1d653cc5249e4038466da2f8860c80da7e8f3ea7d5d13ada8c4b883772dbe3d373861d973a884ae8a4365faf1879f
SSDEEP

49152:UWJ3XZ2iafjrRb/y7qQ+4+epd7q9+pUgWMDng1nzRHSJksQuJ13H5g04o5kUtJ:USnZGglVrq9sWMDnynzRdwH5j5kUtJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1723c20897f06facdd1d59d38a5a7153_JaffaCakes118

Files

1723c20897f06facdd1d59d38a5a7153_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ