1c1c4bc1d9d85983c9011d56a40bbf4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c1c4bc1d9d85983c9011d56a40bbf4d_JaffaCakes118
Size

281KB
MD5

1c1c4bc1d9d85983c9011d56a40bbf4d
SHA1

8a7743dbc006bc9c17eac28841fecbdb61c7c7fa
SHA256

4d597e2026de1405b22afe6b05256c05c62de7e5d4df6978cf7f4b9656338a47
SHA512

5a6c85aa96df9b512b9ab27cfb16ab414fc10fbdef82a069af9e2a0061ed0687b17d3aebe4f11211695b0ce08f151722bd586c71255c02608f49f1aad0b3f0a3
SSDEEP

6144:lN7RZ9W4t5QY8TJYeDjpc8OfJ4PEatQGgfLDz6zAoIUml3nk:3P9W4t5QTJo8Oh4edf/zg7IUmlU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c1c4bc1d9d85983c9011d56a40bbf4d_JaffaCakes118

Files

1c1c4bc1d9d85983c9011d56a40bbf4d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

netdde.pdb

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oli
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE