6683f7ceca1677c634d95ba65fa90c5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6683f7ceca1677c634d95ba65fa90c5e_JaffaCakes118
Size

730KB
MD5

6683f7ceca1677c634d95ba65fa90c5e
SHA1

c09d9a19c852dfb4df4eecd6e397996d1e60dd64
SHA256

92954b57c58064df3ac7285861889c08031ec712f40948de6df89a6e6f7eaa09
SHA512

ef1c8fc911e91ef68d7c46414f29ab57aee65f38532bf005fa4bf8c3cd8478e272076d89b169407ae72c11708bd5a6144b2a185f701e5049125630d70aea227c
SSDEEP

12288:i7/Ydn8j65Iy0bp1fEPrQuYpU80qzCqOy:isdtIy0lajQJpU80C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6683f7ceca1677c634d95ba65fa90c5e_JaffaCakes118

Files

6683f7ceca1677c634d95ba65fa90c5e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 674KB - Virtual size: 674KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.newIID
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE