23be08a962614af15e3e6d2da7476a79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23be08a962614af15e3e6d2da7476a79_JaffaCakes118
Size

2.9MB
MD5

23be08a962614af15e3e6d2da7476a79
SHA1

aa9b42de49b144f9debaed3bcb5e8f86a1d3c481
SHA256

d7eafd6bf8b72a9d4cfdf40be5e4a1cf0d35d82bf8c73340f2fa35523455ad9a
SHA512

c2170ef8550b619950dd841b898fba0a10a2c71549933a074a8ee3ddfcd847d11d691e9554bf69f9f930b6a9c6c5caac3ba96ff2cc746b9b9c8aa87ad500b7ac
SSDEEP

49152:R271chgkSS4OZm4eTWm3zWoso1coEUYEyNdVI+XtgXmRVK5bS:06hgkSjNHWmbpw/LOmiS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23be08a962614af15e3e6d2da7476a79_JaffaCakes118

Files

23be08a962614af15e3e6d2da7476a79_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ