313de0ffde78f486be4c5a92c3715ee7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

313de0ffde78f486be4c5a92c3715ee7_JaffaCakes118
Size

11KB
MD5

313de0ffde78f486be4c5a92c3715ee7
SHA1

1c84be28990547c70168774c1c98222c37d2b530
SHA256

7e7b938baad7d861526d0fb3ad4f2f0f8277bc62e2b7313850d84fb366c38af9
SHA512

ae74a67aac11a50090ea828f050865000e8e642ec975cdb217c9cae8e69b1a2b41d76860289ba55cb420b286448f9af34ae7c4d5fc612543fb340f8f57d1d98d
SSDEEP

192:jj+1ALp8sQWpcY7uEFuqLL7F4xTL77VFSw1uEKPbiQgl+gm8ZBYF920uJ:Kg/jp9SY7FaLPVF1KOQgl+gm8Zaf25J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
313de0ffde78f486be4c5a92c3715ee7_JaffaCakes118

Files

313de0ffde78f486be4c5a92c3715ee7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ