62eae1b38cb265c30b93d67e7372d84a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62eae1b38cb265c30b93d67e7372d84a_JaffaCakes118
Size

42KB
MD5

62eae1b38cb265c30b93d67e7372d84a
SHA1

3884fea464dfd568a6a811d7ad3dad8e4b777658
SHA256

0b4898882f5d897318443ee9880b85daa0f8ec422b23f96d11e09766d4894cf0
SHA512

01daefcc203153e96277ebaee66bd05cdbeb9b1c954eda313d265765f80f1949c727f1a71a71abfea4bee69d14f3154bd9f24e1551e1d002b81993249b149951
SSDEEP

768:czBfPncnln/KjbvJ/dVD09a934FckWBNMBZlQoDgvLq0ip8t/KeR6IRtkhxBLDT+:c9Mnln/s/Ia934FcksMRsLdiqKeRXi+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62eae1b38cb265c30b93d67e7372d84a_JaffaCakes118

Files

62eae1b38cb265c30b93d67e7372d84a_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

msert_empty.pdb

Sections

.text
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67.4MB - Virtual size: 67.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ