604a806bfbc1953b7fe49dd25991fe32_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

604a806bfbc1953b7fe49dd25991fe32_JaffaCakes118
Size

5KB
MD5

604a806bfbc1953b7fe49dd25991fe32
SHA1

faa923d1149f7b9276e6f008993f1782697f341f
SHA256

16b584581d08d0a22c6afe19d1274d6b17275324d4ce0f1e4e144d11e76e3eaa
SHA512

4a4ef2f4ec517857220351191c9ee05baa5333a1a14b6277420152ca3bf8fa1813ce71037edfcf0b67ca94604152e98ecdcda50b48f738b5853743f785254c0e
SSDEEP

96:q7Y+eTi0ldmb5q8ThOVmP8ovYJl7+omDf+Vk37f/YozdQG0:uY+eTJldyRThHP8ovYJMomgk37IohQG0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
604a806bfbc1953b7fe49dd25991fe32_JaffaCakes118

Files

604a806bfbc1953b7fe49dd25991fe32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ