32d9fe1dd34dbe40e8dd4c3f864b86e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32d9fe1dd34dbe40e8dd4c3f864b86e3_JaffaCakes118
Size

66KB
MD5

32d9fe1dd34dbe40e8dd4c3f864b86e3
SHA1

5983fb0a3bdba451a89508f128355085c3d22e97
SHA256

d459a0598bbad430dfda00e6f4e3c797399a8880c22304da67c30f5dc5faad6b
SHA512

db2ebe488e944579893a14cbb6af7ee9c7a42ff6834e151290d5f6cf17b5256b44d5b2380ba9c2182d9f85ce572ec3c2a580dff1bd1579e4c8fa19ba8ba99b99
SSDEEP

1536:HjzBLypAx3k6Yk8eBBEZf/hwLPQL4Ixetf9cDjD3:5JnBBEZx0P+vAtfMj7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32d9fe1dd34dbe40e8dd4c3f864b86e3_JaffaCakes118

Files

32d9fe1dd34dbe40e8dd4c3f864b86e3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ