65ffe6174f4e37157cbcd6cc80475e00_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65ffe6174f4e37157cbcd6cc80475e00_JaffaCakes118
Size

388KB
MD5

65ffe6174f4e37157cbcd6cc80475e00
SHA1

72b694b55ac45ad978b4e3e5cef158b49327afc8
SHA256

204a419e9e38e8cc3223f48df2a9eae2e6bbc265b18bf6750ce57452106ad1dc
SHA512

16d09ac2add1bd8fdfad42ec0869b867e19fd4afaa2c8a83ef74675982ab97d2dd3abb89089f7ca0d6f60a35395993a7f9b2159a7a1519989b264015cae14fec
SSDEEP

6144:P8Xp99z4T14KuS2ixl96EEujXZUWYT0eq7gX4NXXcGw:P8/9kNu/ulvE8S5TtQgXWC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65ffe6174f4e37157cbcd6cc80475e00_JaffaCakes118

Files

65ffe6174f4e37157cbcd6cc80475e00_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

logon.pdb

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lif
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE