424d6308c1d2291eb062c29efdf1cb95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

424d6308c1d2291eb062c29efdf1cb95_JaffaCakes118
Size

187KB
MD5

424d6308c1d2291eb062c29efdf1cb95
SHA1

7d66ea901632840f444f52052778310939d2a6fb
SHA256

34deeb29660e683c3ff889e8278e152e246b1a3e19242789a8a099f9823c67b1
SHA512

496e85043471e790336b1052714d8e32f669ca3b7a2fc4d56f9a819eca18169c0ba56eae1033b20a9d2086fdf0994fb537acc3800778f43e7bbabc2f2eccd9dc
SSDEEP

3072:xOVIRY5K4AFak84WiSo/o5m0Soix8MTKvOIm1+Ff+6nyV4l25aJHU5hOLRGS3YIN:QWdB/yEhnsF84KV4PUzOdGLI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
424d6308c1d2291eb062c29efdf1cb95_JaffaCakes118

Files

424d6308c1d2291eb062c29efdf1cb95_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ssstars.pdb

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rol
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE