448b4772865e14beb28432772c086b45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

448b4772865e14beb28432772c086b45_JaffaCakes118
Size

76KB
MD5

448b4772865e14beb28432772c086b45
SHA1

2e289cae3f2fdf858f295c933e7e39c1050d83f7
SHA256

17df3e75a2a14d85835bbcdaffadef5a305d7eac1b3137129df46b0f4f6d5291
SHA512

3e2f30a77a25b5a2b13b28776638d59d62f110c63f7994098dbf717820e867aafd434b0cecc8b150468e73b796c64da1f5e3e6bd486bca85ef60febef6dd3da5
SSDEEP

1536:npDGijK/R+Io6kl5LZSGrbVhw/tBm1fAOkW6QrSUC:c94LZSGrnUtk93kW5rDC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
448b4772865e14beb28432772c086b45_JaffaCakes118

Files

448b4772865e14beb28432772c086b45_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ