616637a60cc2313cb660a97bb831b131_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

616637a60cc2313cb660a97bb831b131_JaffaCakes118
Size

13KB
MD5

616637a60cc2313cb660a97bb831b131
SHA1

f02f56d96f91ebc912269a2a3b3d17635bd08903
SHA256

1aae50f1972dc25221c48858d3dfed921e4301b89d8c3ab097ebd4da3fc01a92
SHA512

a2601cdd23882b81b20893964336c600cc600912c9b68b61338e5afc5a5b048c356466333d1bc6bea6348a8776b024390af6f7e5d6fa9880699c140aaaab6f66
SSDEEP

192:oUOMnFjwF23YJerxuDifXPM8EaKg8tskoH7ajZAkeJcf+Rp1AsNo8HxOVhe9sa48:oPe1wU+Y1TqtsMDf+Rp1AsN9ROa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
616637a60cc2313cb660a97bb831b131_JaffaCakes118

Files

616637a60cc2313cb660a97bb831b131_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.6MB - Virtual size: 19.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ