124f0f87001258112ebd5a234bb7dd83_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

124f0f87001258112ebd5a234bb7dd83_JaffaCakes118
Size

20KB
MD5

124f0f87001258112ebd5a234bb7dd83
SHA1

1e88945d3523a66066f5e2b3f791e68898ac4f6d
SHA256

b2fd1121626a962147cb91f87f5b26dd11d494bcc65de0f004badb44d4018be9
SHA512

4251ea3a4afd04f1b9aa180434bc46f34753ee36962221d4b04357e012bc4292db2e4374df191f264bc6029db9e9bd30ae4e31d2e37e13d68ecb40b1fab46988
SSDEEP

384:uPQ7VM0RTh7tTpQI2EQKbQiPLL5ldD84nScFqK5JergCKusoIjh/0:01cVhpQI2EQK0iPDh84nScF15GYc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
124f0f87001258112ebd5a234bb7dd83_JaffaCakes118

Files

124f0f87001258112ebd5a234bb7dd83_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ