199fbe6516b73094f2988e351a2b808c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

199fbe6516b73094f2988e351a2b808c_JaffaCakes118
Size

64KB
MD5

199fbe6516b73094f2988e351a2b808c
SHA1

432c9a81bdc76307801715878642446761b1e894
SHA256

cd884d508699da2e105331ae51cfd469bca79df1408e038d65f4af1ed9b1a9ca
SHA512

fdaac0a2916acecd513c2d01f874d9a03a29e2ba9cd2794c9b09f2a51cd22c17bde3acebf4cdf72104eaa076522c608b58f702a7d0b7de36a00bdc5eb371e505
SSDEEP

1536:djCBLypAx3k6Zk8eBBEZf/hwLPQL4IRetf9cDj4:mJKBBEZx0P+vgtfMj4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
199fbe6516b73094f2988e351a2b808c_JaffaCakes118

Files

199fbe6516b73094f2988e351a2b808c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ