231045eb1090503b9701203e7ad58fac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

231045eb1090503b9701203e7ad58fac_JaffaCakes118
Size

131KB
MD5

231045eb1090503b9701203e7ad58fac
SHA1

c5224f3647b6f69ab7af8076d504b523260f9808
SHA256

4f8ad1c848575c2122f13e7aeae79495d8078234610171d40e1a80be92cd0891
SHA512

6f92d31d5607ed6a10fb5d691f6c6b14ca399714add85aac6c608c9789775b65477e875b3c7e2a807f62f19a8c20dae23d3c2ce563701b3dfd7238f82a7807e8
SSDEEP

3072:J68rqt5HfQk4usvX/4Z7F487twkwO6Etl1023:SHfQkmYv4Wwzm023

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
231045eb1090503b9701203e7ad58fac_JaffaCakes118

Files

231045eb1090503b9701203e7ad58fac_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

BSS
Size: 43KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 54KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ