409a856973e5f9b03ae5a7eb8ba9209d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

409a856973e5f9b03ae5a7eb8ba9209d_JaffaCakes118
Size

2.8MB
MD5

409a856973e5f9b03ae5a7eb8ba9209d
SHA1

f74892d84ca35266be100bb481d57aba530222f9
SHA256

253800b4119f1ba1b62f8ebd73c224c5d5d720a463341dec880c1b44a6579de9
SHA512

dac1b009448faa1c93e50127b877fef608e34e5844e52048717302dda5749161ea1e6f28a48ece08e9cd2653761c3163c64f5b5e8da488951a6bc85d6a5488c2
SSDEEP

49152:/2nT/j0AG7BmgYBf/ZkYDXAOcLSCZqQ72VdsPtZRV3zyXM:eLj0JVm/peYDXAOce7Q72VdyZryc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
409a856973e5f9b03ae5a7eb8ba9209d_JaffaCakes118

Files

409a856973e5f9b03ae5a7eb8ba9209d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ