404dfc1fd4637651015398b03975dbd3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

404dfc1fd4637651015398b03975dbd3_JaffaCakes118
Size

904KB
MD5

404dfc1fd4637651015398b03975dbd3
SHA1

063641a6d179d10c68a9b8afeaeab79d0538c3df
SHA256

96bfd9ae077cd9408da02c09e1208fa3015d5484831e6ec13cd8a0abfc799aca
SHA512

be8f18c604a46989c4a876831d4a48b0d7139978bf1970499b1b8ae8d143052e38d26f56259dfc86066903eb39ae2a071a611354834ce50740f2ba9af3a296b7
SSDEEP

3072:ft2cWtTBfVkfqM2SCAygRjlIqZoFzJcqu8:hWtTBdsqEPxjjoFzQ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
404dfc1fd4637651015398b03975dbd3_JaffaCakes118

Files

404dfc1fd4637651015398b03975dbd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ