4c9c91767882882147e02cb80e7d2c89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c9c91767882882147e02cb80e7d2c89_JaffaCakes118
Size

314KB
MD5

4c9c91767882882147e02cb80e7d2c89
SHA1

a3871b13728dd7c082f11de344c453845e6e22e5
SHA256

76e76010fbb9076d0d668da94d1636003ff3c6ce64b3b43e7dc89ad5de4e815a
SHA512

01ed546440531b1c7284b65de9612ea55f0298af182106007a1eb3f951def262f7457f3133ef9924a0a4765266c0973c816174262eb61f2a54fe9a64666b0363
SSDEEP

6144:kIjiwzn9B2KRaeqUp3WJrM6ETCoPssPgmsq2i3iNS7GKuLzlFE:pvn9B2KWS3YMtTCoPLPTsq2nAuLzjE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c9c91767882882147e02cb80e7d2c89_JaffaCakes118

Files

4c9c91767882882147e02cb80e7d2c89_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

iscsicli.pdb

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.wtq
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE