382427d62b1cff059b3379c70b0223b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

382427d62b1cff059b3379c70b0223b2_JaffaCakes118
Size

8KB
MD5

382427d62b1cff059b3379c70b0223b2
SHA1

2ef9d8fc4dc44bf643938f7ddaf4e712d5288c32
SHA256

9675c1e0815071804a3596c953f3c05023b5de2604c47b84309bbf3594f7d33e
SHA512

38046b26e805b33664f6df8427e112f520c7147d3264c8101e7986cdbc3af333dd404fc00ad515e4cc4ebdc1e1a946a481f6eb3c84954591e75733e5f10d874d
SSDEEP

192:LR9yG0vA4EvnjpLzDxX0EEKC+kqadRxhT:V9yG0EvjpL5X0unkrvxhT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
382427d62b1cff059b3379c70b0223b2_JaffaCakes118

Files

382427d62b1cff059b3379c70b0223b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 406KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 556KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ