448c05b410e53934f2f03e4c60000468_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

448c05b410e53934f2f03e4c60000468_JaffaCakes118
Size

786KB
MD5

448c05b410e53934f2f03e4c60000468
SHA1

ad289e9f6d7c5396d565184a2cc861bb0731f4f0
SHA256

9c56c752ef22d292ccb40cd75e5b4f736842022d5f8c15126aa1888de720cf77
SHA512

f061efec5db0fa3b2d2e379a8d2468b4c743ed78eeee9a28c9d2ad13b12657b2b73cd327e1f73910d0a33ed29a220bd3de393cd2407a522575f713cee716929a
SSDEEP

12288:C67jqNmev57xoPifrPS2g25BXsyI+tTEkWJAbtusCjaWJ/wYgxH:9qNmevAATS/l+lRWq5uR/J41H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
448c05b410e53934f2f03e4c60000468_JaffaCakes118

Files

448c05b410e53934f2f03e4c60000468_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 348KB - Virtual size: 347KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 118KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nkh
Size: 173KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE