18590ffce820cc457cb21f8f0850dd6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18590ffce820cc457cb21f8f0850dd6d_JaffaCakes118
Size

640KB
MD5

18590ffce820cc457cb21f8f0850dd6d
SHA1

1358b49e19ea063dae4bf9196f7b4a8d20f0cc3e
SHA256

e996bf549b25a99392eabe464b374b00eca81db6ef0320757853f841b843734a
SHA512

b0ef884f0f47e0d10f481c0b8ec1a3ab85895046fee278e54feea87d6e801e8da2016c9a25371e614a69e749586fdbec846da25543561449d319f21d3fea8244
SSDEEP

12288:5na9PiX+IuJQH5QV/vnQPV0ZifpBViPELi9m5loatcvS38LCJQBtdGs1rBLsJ:5naxDcQV/vQd0gfv4wYmXkS3rJQBtUkq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18590ffce820cc457cb21f8f0850dd6d_JaffaCakes118

Files

18590ffce820cc457cb21f8f0850dd6d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ