61d97ef8c195bd15a4421469d180af0d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61d97ef8c195bd15a4421469d180af0d_JaffaCakes118
Size

274KB
MD5

61d97ef8c195bd15a4421469d180af0d
SHA1

9708a92cd6c8cd1fd498dcf2f4e28faa5bd473ed
SHA256

5b75f271b6c3563e4e87eeef0f9e1ded8a336c136d8bdfbb4db1447d849d3e48
SHA512

0c2cd1bd2637756683f95dca936dab4cb92a81cf73bd4770b4d6312df1093981fa7c92d87fc31d0d67702f750ea9603403243fb239ca77df58e8e95221bd35ab
SSDEEP

6144:p6qC/1nSSUly1Kp2Oyz+yaxi/CJsypt7BElWi5p+xdh8JlHxi6lah:6/1SSUly1Kp2OyiyZKJskBElWQaderP6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61d97ef8c195bd15a4421469d180af0d_JaffaCakes118

Files

61d97ef8c195bd15a4421469d180af0d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

PDB Paths

sysocmgr.pdb

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gda
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE