645d204c1e5f914862512affc3fa26ac_JaffaCakes118 | Triage

Sharing

General

Target

645d204c1e5f914862512affc3fa26ac_JaffaCakes118
Size

21KB
MD5

645d204c1e5f914862512affc3fa26ac
SHA1

4f903f58813f789a18daeb75067e14a43c8defcb
SHA256

4cf7de215112089d21ca2c4c7d8eebed2868814fa5cfe233f3a0382680ee6c64
SHA512

779d0fc84d972dc5bfa4dc722886005d4e6751192e0bea8969707e8753f2d02845d87e6d7a73067be751daceb247d0c5f53b1fcba48135faa0e6b7b91acf3281
SSDEEP

384:Kg/jp9SY7FaLPVF1KOQgl+gm8Zaf258RJyipv7U5mrrBmTZWScbPljhoiSR:Ke3PFaDVyOQgljLDKRJyM3BmsHzSR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
645d204c1e5f914862512affc3fa26ac_JaffaCakes118

Files

645d204c1e5f914862512affc3fa26ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ