763705da23114b97b473142020655506_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

763705da23114b97b473142020655506_JaffaCakes118
Size

162KB
MD5

763705da23114b97b473142020655506
SHA1

b69d06c780d32356afcdb6615ce294f0c0d4690f
SHA256

415c5b3dd09eda49e2f2239c7a36df186102e11806227c5310a5cf3b9bd48ca6
SHA512

fe06ed970f0043dc5c79b4f122d75cb1f6ed39ec4a9c1f786bb180124a9a2c1bd21cf8c259cf08954f9dfe4b6eeaa0033663fc9bc8a6adfe260139fa0f360d75
SSDEEP

3072:NBr3t+aUkobiwFcRQFSbT6vwEJZlV6448hQH:cJYEHvk8hQH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
763705da23114b97b473142020655506_JaffaCakes118

Files

763705da23114b97b473142020655506_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wlsetup.pdb

Sections

.text
Size: 922KB - Virtual size: 921KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ