732bd363edf7c0cfe019293c17c54bf5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

732bd363edf7c0cfe019293c17c54bf5_JaffaCakes118
Size

284KB
MD5

732bd363edf7c0cfe019293c17c54bf5
SHA1

bad65234d7fabceb2cece062bc6581c536315e76
SHA256

61e32e0b83d3cfe0d272e6291710eb00bb40f46b5c7522d7f7bb8905275c8d2a
SHA512

50e12d5aaaecd4a36813adc40e74633d78662463ae0be22f96142d865f99bbe959c101134f292a179052798ee4125a14f6bf0fbd39443993646470d2e66e96b1
SSDEEP

6144:9nqHOd2x+Pegz4MMMMM2MMMMMJvThIkXPnNGND83pWcZhz0W:9nqHO04egkMMMMM2MMMMMJLhIaPN4D8R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
732bd363edf7c0cfe019293c17c54bf5_JaffaCakes118

Files

732bd363edf7c0cfe019293c17c54bf5_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wlmail.pdb

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 9B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.heb
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE