288471c371c6a2ad40c115e022738d06_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

288471c371c6a2ad40c115e022738d06_JaffaCakes118
Size

399KB
MD5

288471c371c6a2ad40c115e022738d06
SHA1

5147ef537b6ead3d198bb048f6f7d216c0d918e2
SHA256

192bd895146d7eafb6532f494ac8f312d0196ed1c7ccd517e7dad7f6462c1017
SHA512

e09529b080ef8e4779e74cdb2d1da1a5989b1ee19e35971c7297b0ea4388d9e47561b3907237ff8575211bc91af9aea084d1608a3f358d9cd3e87515c69f7e7b
SSDEEP

12288:KGaPM5qogkZV3r0tUUUSElccHZk28fR3YyiS:ik5RgkZFgmUUSwcckZ3Yyr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
288471c371c6a2ad40c115e022738d06_JaffaCakes118

Files

288471c371c6a2ad40c115e022738d06_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 123KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 111KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

WinLicen
Size: 845KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE