6501e647297b5f67654fc94e72bd7194_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6501e647297b5f67654fc94e72bd7194_JaffaCakes118
Size

85KB
MD5

6501e647297b5f67654fc94e72bd7194
SHA1

ab19417271b0b20df6572da13c47cedd401684ad
SHA256

1da3f8f134f63af4e0895c71c7986a9f4f21babf34eb59dcfb7e0974345eb571
SHA512

28fc9c601b25d550ef999895f35d36ae7fc1fb6f2ed4be36c74a3e4d5bf32e1f56534da7ae7ccba124083c116d10dc30970a0c2479dbde165ae8492068572508
SSDEEP

1536:/RDBoaMDxAPKkov+Lx7UY5c8effxev5A/p8jxj/E:xmaY9+Lx7UY5RCZev5gClE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6501e647297b5f67654fc94e72bd7194_JaffaCakes118

Files

6501e647297b5f67654fc94e72bd7194_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 658KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ