4a9299f9f01b03928e12118e48cbb666_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a9299f9f01b03928e12118e48cbb666_JaffaCakes118
Size

200KB
MD5

4a9299f9f01b03928e12118e48cbb666
SHA1

e7017231711a06bc9e61e62b1210015969d9372d
SHA256

5cf734e0ebfa12568fb1fb94592b9d425d10a166046ae3a082b20199d8250f1b
SHA512

3aeac1d1ca452ee636374d96e75d38e460da430984b635b26f74ca5d9284a470891090d197a6868d8c8dbd65f775c454951362141079535dc5a6189cc0d8aeea
SSDEEP

6144:71Gqz7yw7TJAWwUBAt+FvQH3p3bTGmD6Na:7H7vpAm4lDmc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a9299f9f01b03928e12118e48cbb666_JaffaCakes118

Files

4a9299f9f01b03928e12118e48cbb666_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pmj
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE