441b3ae86e59cb859a76cc5e7600d6d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

441b3ae86e59cb859a76cc5e7600d6d1_JaffaCakes118
Size

285KB
MD5

441b3ae86e59cb859a76cc5e7600d6d1
SHA1

2cc9baeea1bf74c82a1d5cdb793d5543d207751a
SHA256

16caef4ed0e25dba5f4e2830be7e9c0f4fdcb7650408446fe89453ca9dff4b75
SHA512

251cf8bb829910c373eb5e17d9351520447b0015f43caf783fd8c26b1ec5f57d673c5d5271ae09f126fc6016ec07621990017f45136f9d97e7640150ca14bac5
SSDEEP

6144:V/UOPSe570SXp3oSx08flXW/if6ZbdQlTnDplxTnH75:eOB0lSxDflXksWx+Z7nHd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
441b3ae86e59cb859a76cc5e7600d6d1_JaffaCakes118

Files

441b3ae86e59cb859a76cc5e7600d6d1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rol
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE