714938831e338a392eecc84d8d398e45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

714938831e338a392eecc84d8d398e45_JaffaCakes118
Size

63KB
MD5

714938831e338a392eecc84d8d398e45
SHA1

8d1b64b1154f04568532609f87b475e79e231def
SHA256

c934ec37295a3a293efa517913d6ba0ec8eb9d5ea535eedc334471e3433421a8
SHA512

da8fd843307338971c2878fd82c15fe9aaa50c7b0932f87838cd4ce164dd8af43c615a74288fe959311a639eb6bf8130cffa06b503a5dae53c530c3bdd4b5eee
SSDEEP

768:0vo0ikAuq2QU4QKOIm3DzzDS3lVUFkejHDiGpIh1dKVwY8+Bh526A:0vo0wuqvADilVzuWzh1d/W1A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
714938831e338a392eecc84d8d398e45_JaffaCakes118

Files

714938831e338a392eecc84d8d398e45_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 507KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 596KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ