1ad55c29ea642774eee20e13476a2e03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ad55c29ea642774eee20e13476a2e03_JaffaCakes118
Size

76KB
MD5

1ad55c29ea642774eee20e13476a2e03
SHA1

b4f96f43778bd5207aac727ff5841a10a188f6e3
SHA256

5796de68c730b6a0cbcd678c62e4f853ad322fee8cd9aa909b3212a2c4561fbe
SHA512

0fd2de2a2c02583e7d7c957fc266fb63f3a955eb38fe187ca615de01e9cdbd54712181824c71a260c1aa5cad11379fc3bf1a2733d4ea213c6de7d31cb4093367
SSDEEP

1536:X/3uMdhQBu6GPqiooNKAGGcHqs/8aWii8F5Ap7:VdhX6GPqiooQDLKs/8YiG87

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ad55c29ea642774eee20e13476a2e03_JaffaCakes118

Files

1ad55c29ea642774eee20e13476a2e03_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 649KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ