251def6b36470ce8645f00d8be4c75d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

251def6b36470ce8645f00d8be4c75d8_JaffaCakes118
Size

5KB
MD5

251def6b36470ce8645f00d8be4c75d8
SHA1

4b7f9e07f90933d4863e632286c82230f30d483c
SHA256

5af4c78cb694a09285ce94092b8e33e44b1cca5e8f769ad95cb87a51941cb5f3
SHA512

2e217a20f4f4be2a174678e00f8047a59cd7d29cce5d4359c0bcf65c8c9706eca7edcb99b8a0c4c69cb12c3fd0fc987a9acb7b8f6f7c8c4e9650918a23998c2b
SSDEEP

96:q7PJ1ZK5XsBObVVggtoeY07L+o2DmVdkQ78/YtEk7E6kjZSRS:uPJ1ZKaBWgIoeY07yo24db7ttF7E66Zl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
251def6b36470ce8645f00d8be4c75d8_JaffaCakes118

Files

251def6b36470ce8645f00d8be4c75d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ