599f47d26241c715310fe980ce7b3fc8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

599f47d26241c715310fe980ce7b3fc8_JaffaCakes118
Size

188KB
MD5

599f47d26241c715310fe980ce7b3fc8
SHA1

722bdd59616f2e7f4f66f02dc7cc1d2ba81de907
SHA256

e93651dc4df9bce08e95450419d489598c2df835f0f4a46d0a42a92a4f497b7e
SHA512

bd0a7561d06d72bc6c0af0a9a7fd0d7642245b921e92e55ac2e656cfdf06689f7d08023b4c6bc0f1ca255ad4526259572a64687d2d0f4f8c497d1b47aaee2fd5
SSDEEP

3072:s+oBbn6ZZdv0LZDQvh1nxuOI9S/0pnRa0nGbH9caS1PVK7TeXObPElMxwnTUhYPG:bpnnvh1nxuOGoDzLKcrYCwnoQWAc1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
599f47d26241c715310fe980ce7b3fc8_JaffaCakes118

Files

599f47d26241c715310fe980ce7b3fc8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jgd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE