72e590deca0af153720dd290aab836a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72e590deca0af153720dd290aab836a9_JaffaCakes118
Size

201KB
MD5

72e590deca0af153720dd290aab836a9
SHA1

7f793ce6c2608336661ff0db3d87971f9a7a25ed
SHA256

f7034e5b7f70173d3255b23f90af50be69a7799a896dd2f18fe8b1405ae234b9
SHA512

79376837ae44036bb9e8cdbaafd2a5a8ad4c45993f60f7e6f05445735cb8ec7c927f42579f373107a517c82d1c0654ac14e914f5184fbe097dd8b2d1da764d42
SSDEEP

3072:yPfEz5aHiueFzMAWFKi1qvbNYbOfyYjQIgmni4GKev0/gv1V5Q/5R8HuqVmj8tpj:ws5flITqBvNjfgmni4GN0o10/5fo+S7h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72e590deca0af153720dd290aab836a9_JaffaCakes118

Files

72e590deca0af153720dd290aab836a9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wmpenc.pdb

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yvs
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE