69e72b199d8f5c35eb16f3d42a6294c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69e72b199d8f5c35eb16f3d42a6294c9_JaffaCakes118
Size

108KB
MD5

69e72b199d8f5c35eb16f3d42a6294c9
SHA1

ab678124591ef2419c339a495c6e0c4164fcfb24
SHA256

2df215f09dcb3b6bf460412a9291c690c714f1df30ced7fafd29ba7f0f4b2247
SHA512

a5e2c17ddb64dbab17726e0827dd38a7aaf3263074c64ce66768148b6cdde09593731820639ab1ca9c554c0d64665983993d0e3be287d140f9ecc506d575f79e
SSDEEP

3072:fKOAMAs56OkE9Oc9UNF0ZIo4HfXFBPMmU/:yd9s5/DONtomfXFNMm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69e72b199d8f5c35eb16f3d42a6294c9_JaffaCakes118

Files

69e72b199d8f5c35eb16f3d42a6294c9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdl
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ