3021d63b491f4728eef41f13fb215a81_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3021d63b491f4728eef41f13fb215a81_JaffaCakes118
Size

2KB
MD5

3021d63b491f4728eef41f13fb215a81
SHA1

2d526da96e7e3fd50aa3cf46030c06ff17bd3faa
SHA256

502dc126f6d12f5a46ba477bb3bb19b9a66f1eab87f29abc2fe78dff192f5048
SHA512

034eb867866f52bb9faac9655eebae35c1dd41d9a225eb4cf6e7c7caa7a40b941b8e739879982ea126c5b6af0a54c1ed19f7dac4b18e0dacfec4c0f57c45e03c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3021d63b491f4728eef41f13fb215a81_JaffaCakes118

Files

3021d63b491f4728eef41f13fb215a81_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ