4122667b3ba12e525de4013f7a28f81b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4122667b3ba12e525de4013f7a28f81b_JaffaCakes118
Size

188KB
MD5

4122667b3ba12e525de4013f7a28f81b
SHA1

87281d66c783622b4316543f95ed59456f0ef22d
SHA256

3273fe2ad96e379dcb6114d07e96c82c827c726c68a322c14b4d324bc0caa401
SHA512

4028d69f4d63a4453c5926307a87e3b7b5378118099c69a88b0d5c6d2a4416d4ebae7e6e09fa2748c0c8c5ded109e73c6d2e3d3e641e00d1a39d30c9ea72c63f
SSDEEP

3072:23oTiRm6+3vjVrMr561pYm2NMcdjvRzrNu2RQWnUPBw2y1RQfiUn/OYqqV+SzeZY:mwpZrMr+eBMcxRzrN1QWUJw2AR7y/OY7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4122667b3ba12e525de4013f7a28f81b_JaffaCakes118

Files

4122667b3ba12e525de4013f7a28f81b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

chglogon.pdb

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nkh
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE