21816d3c2b48b55dd0cc79bdeafc4a06_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21816d3c2b48b55dd0cc79bdeafc4a06_JaffaCakes118
Size

177KB
MD5

21816d3c2b48b55dd0cc79bdeafc4a06
SHA1

031fec49b6a7dce59378b2c02acd8aef6a4a3a64
SHA256

1036ab0fa19caddc0d1113d6b6c71d3069c8ca32cc94b9a32573d4de07750f3e
SHA512

bbe87f7570f8d32b854be3a4c5e12626e0b4b73234ec63e72e8c2e3d5e0c6f659184a0a110e90b1aaacdc116179ee235c7302ad771650aa6781be8b25a446d31
SSDEEP

3072:c2jDsmuMJiChj2NqhNpqME2ZIbQgNZZPhdHE0k0vMCMx99MxFdp4:c2jDruMJzhjOqhNIM+jNZZJxVfp4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21816d3c2b48b55dd0cc79bdeafc4a06_JaffaCakes118

Files

21816d3c2b48b55dd0cc79bdeafc4a06_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

W:\NMC\Alt\CL11SR1\Addon\WZCline\Src\w32prod\wzzip.pdb

Sections

.text
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 759B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gda
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE