1bbfad3bb4fe2a19ab742e7906706fe8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bbfad3bb4fe2a19ab742e7906706fe8_JaffaCakes118
Size

3.4MB
MD5

1bbfad3bb4fe2a19ab742e7906706fe8
SHA1

995869311e951023e68fcfc3a428ee42bc49c4ad
SHA256

d73a683bd31e18cad9a4e4e29bc62617480d744ecd959e53b1755bb8b56fe699
SHA512

12f72033757a1371daee21dad167e467711e31f8d8eb35d49f23049f120a2cb8eefc56b63844846eb1866d8f6136debaec0bd2710c4c21e5ed33d5b64cdc09be
SSDEEP

49152:Qa1ISQus8/2Ge/5mMk1HvWpcnKcVyCDxl4KZKWCbqu:71ISQusLGKmMaHgcnogxPKWCb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bbfad3bb4fe2a19ab742e7906706fe8_JaffaCakes118

Files

1bbfad3bb4fe2a19ab742e7906706fe8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

MOVIEMK.pdb

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

MovieMak
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 597KB - Virtual size: 604KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE