1c21d9e5883f2cf1be0c853b31d4f21d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c21d9e5883f2cf1be0c853b31d4f21d_JaffaCakes118
Size

90KB
MD5

1c21d9e5883f2cf1be0c853b31d4f21d
SHA1

aeadedc6ae9581a5fc63892b3981482c23105ff1
SHA256

d2a77086453d444a281f0ce63c9fe09b30978b112992b6b95093d675dda95767
SHA512

afd88e7889c948339c4dfe69b5893d5390673801b542e39912b004698c59d559a723b112e153a6f74cb1d9fa4b1f2a7254cbfcdec265857d91e65dd58ba59b21
SSDEEP

1536:j9HCkI9DINXpzo2IrEknW/CPIvICuxczMb70g0nCgr:JpIDINXpug/CPIQVxcokg0Cgr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c21d9e5883f2cf1be0c853b31d4f21d_JaffaCakes118

Files

1c21d9e5883f2cf1be0c853b31d4f21d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 671KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20.3MB - Virtual size: 20.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ