1a21277b8d7e800578ec9c4f3ddfc53c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a21277b8d7e800578ec9c4f3ddfc53c_JaffaCakes118
Size

97KB
MD5

1a21277b8d7e800578ec9c4f3ddfc53c
SHA1

0d01d49b9343442f9ff1d13d19edc3d6a1c980b0
SHA256

366cc2bfddd6335828914894a1ecf6f95b6e940a1ab8e5ab1fbbe68aad69b33d
SHA512

0db151cb02af4a4c2e309f0b783b993dd21297a07c1805977c9b0aec3757eb3184c4489ff4335bff1e199ce802997b0e30e2b50572b73a4659e45aee04530399
SSDEEP

1536:ALtrkynrvvLzEAwCFtkXYu0hX9NYic8kiwZW+eXx+ig7PzbEroyi/1+CA0Sb:MtrkyrHL4AFtJu0hXvYXM+eB+iMG3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a21277b8d7e800578ec9c4f3ddfc53c_JaffaCakes118

Files

1a21277b8d7e800578ec9c4f3ddfc53c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 809KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 396KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 52KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 84KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 936KB - Virtual size: 960KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ