263e403f7637684d7ca483ab30be1e66_JaffaCakes118 | Triage

Sharing

General

Target

263e403f7637684d7ca483ab30be1e66_JaffaCakes118
Size

24KB
MD5

263e403f7637684d7ca483ab30be1e66
SHA1

d7ecbc64b0b7e820418fdd84f9b974260275cc54
SHA256

c3b769e4653a98ccb758f743cf978b7f6fb8a14e233408f337dc258983357af7
SHA512

df5394ed006f66148a3d94b99ccca4472cebba2f82c162e4300634ef369a2484a8623bdb7eedff3c02ed4aea075485fa5da0f4bb2a547e61a959c891e1359744
SSDEEP

384:o4SvwERcxg7EAsNVup3y05I+ncVzuFzz0s1QhYehIeI7S2Vxmrs:rSF2GHIVLQnkzS0m+JIeVkxmrs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
263e403f7637684d7ca483ab30be1e66_JaffaCakes118

Files

263e403f7637684d7ca483ab30be1e66_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 660KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ