6638587e2c167402f1e3b67d4660b04b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6638587e2c167402f1e3b67d4660b04b_JaffaCakes118
Size

183KB
MD5

6638587e2c167402f1e3b67d4660b04b
SHA1

2099e22e7332e4b879b0df4ba1569f6a81f7db11
SHA256

d132767d065ee1585c4ea28277d4e4db120b9bd69694dbc85bf9872ffc72c0fa
SHA512

f97e1726a4c8fb8a5f9b6ad647d21c4f359b0616728f23315cb4d9a4fc6d43f1eeca390154ba6dfc9df8db6984efa8f57ca680254d696d701000771a969c53c2
SSDEEP

3072:SnzYWg2di57lJ6XweG1LoNOkqDYtR/GrhYevxWhfpK5esCxb1C:SzY8CWgWLr/8YhhUwb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6638587e2c167402f1e3b67d4660b04b_JaffaCakes118

Files

6638587e2c167402f1e3b67d4660b04b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE