659b2bc78d00dccd5de22abf6a96cf70_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

659b2bc78d00dccd5de22abf6a96cf70_JaffaCakes118
Size

73KB
MD5

659b2bc78d00dccd5de22abf6a96cf70
SHA1

5f2ded077e443a5df4806a21eedbfb81e221a926
SHA256

00d9fb742c93c0753c9547343e1023222ab1f69f42d1c12088d14dfdb07284c0
SHA512

c0a0bb40d07a82f430c4de993ea385c2eba94289017ccf09e7c423170f17a9d7d1afd003ffc5556fe8725538921787b81af584d62dc03cd9382242f0a1342ea8
SSDEEP

1536:ioV3AE2RIpXeCnWY8GuCEPpBkOIXQH4ZJS0:1V3cRIpZqX6XQH4ZJS0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
659b2bc78d00dccd5de22abf6a96cf70_JaffaCakes118

Files

659b2bc78d00dccd5de22abf6a96cf70_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WISE
Size: 26.3MB - Virtual size: 26.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ