294d6616d205980b890c72e33c0e7c75_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

294d6616d205980b890c72e33c0e7c75_JaffaCakes118
Size

67KB
MD5

294d6616d205980b890c72e33c0e7c75
SHA1

eb38e328b981cca07303ed9379990905a9d7c7c0
SHA256

1bf0ae45b58ba03d6bb43a21f5ce5837a366257a5862128ad9a2b62ba02c0ee8
SHA512

1bef220895a27426cd2ae9b1305b3505853a0dda6520667eb0df4c1119e80f14b8594cd843f2f3c88415fee1f0423b8e5d2ee5f8d5dc12fc7653a994bc9dab45
SSDEEP

1536:CO+IaQcakk2e3Kol4VP7uSOqd20PGxFKzf17b:FeI3KomVPSLO20O/Kzft

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
294d6616d205980b890c72e33c0e7c75_JaffaCakes118

Files

294d6616d205980b890c72e33c0e7c75_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.6MB - Virtual size: 19.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ