63a76b3fccf8a7a50082edf5f647115a_JaffaCakes118 | Triage

Sharing

General

Target

63a76b3fccf8a7a50082edf5f647115a_JaffaCakes118
Size

59KB
MD5

63a76b3fccf8a7a50082edf5f647115a
SHA1

6aed0b60d1539154272aa4e75444e2b516c6490d
SHA256

b2f2035091b0cd6d016ea0f98ac8096346ec3617a1906b3571d283e5edb225bc
SHA512

723def6d683f5fcd552625643611bd67606b4806cc78ab6ad4d342739c1a25cc327d0701d9410dcd6167654b7febd4bcaed653ecbee2107bb0c0fb4d035e4d80
SSDEEP

1536:gAJAMNSbJYygZ0JASnSSnOFcVfufbK3KGAFj:3SVYygZ0JAKSCocVmDs38j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63a76b3fccf8a7a50082edf5f647115a_JaffaCakes118

Files

63a76b3fccf8a7a50082edf5f647115a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

ASpack
Size: 512B - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ