414b7544d7323e77ad60e691d44d7630_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

414b7544d7323e77ad60e691d44d7630_JaffaCakes118
Size

24KB
MD5

414b7544d7323e77ad60e691d44d7630
SHA1

d5b0573f30231e786f1f981645a179a54f85caea
SHA256

596b54fcc9f97b994e4bb2143c43bc58f26547900c9cfd6367903a2e8c5f7289
SHA512

42f6525c7f7cfa76aeb63a29e3958988efe92574c1d1142335139f1da58fe92b0debcd56a74671466de8c5b9e95dcbb9e6d1c64b7b4d2c14c0b1e99911c04c6e
SSDEEP

384:ueQ7VM0RTh7tTpQI2EQKbQiPLL5ldD84nScFqK5JergCKusoIjh/zGyg:51cVhpQI2EQK0iPDh84nScF15GYb4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
414b7544d7323e77ad60e691d44d7630_JaffaCakes118

Files

414b7544d7323e77ad60e691d44d7630_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ