244f1844edc76951ce4d789c8bc8bdc4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

244f1844edc76951ce4d789c8bc8bdc4_JaffaCakes118
Size

358KB
MD5

244f1844edc76951ce4d789c8bc8bdc4
SHA1

577567bed28622d40bd2c39c71b13b2714b98221
SHA256

7f04c9bf49ac978c111fd309df3c9db0a2c33092b48c1ffb85cb84737934fb39
SHA512

545eaab956ef35fc49c981a17b4276a47d18b966fe60af52c8d891e75ad922eaf8608c122b4548d7e84a59a6a2a148f2131c2cc28374f7420fae4556f3fc3dc1
SSDEEP

6144:NLHSh8WmsN3jFTdxjOjn1MMH7MMLVrFhcN6v3h6mAvM6vZsF6VeTmPOmI:Nu1mkjFTdEBMMbMMBrFic/tQ2F6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
244f1844edc76951ce4d789c8bc8bdc4_JaffaCakes118

Files

244f1844edc76951ce4d789c8bc8bdc4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wtq
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE