738af005b5f0bbb934d439a256b95dbb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

738af005b5f0bbb934d439a256b95dbb_JaffaCakes118
Size

116KB
MD5

738af005b5f0bbb934d439a256b95dbb
SHA1

aaec54f3389871b8f2c61eb7ca1a0b163f8c8b59
SHA256

7a11ca5cc7d2d0b2e4e8d0a99967c8922af06bdf2d1d6b6d8a8be66acc8652e5
SHA512

e7b14654273380a4e8fa09a08c1a22c5b841f371e2f334af2c7fece0b4446ac86c25342143e82a06c2a5fbb1a2418adfef939153f2865a4cfd7412ba19134983
SSDEEP

1536:rlJy0RUPpgm+86UjjFFIBTUJiLTjyOmPVxzbLfPzKqR9H:RQ0R4/bZFJiLT2PVxzbLfPzKG9H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
738af005b5f0bbb934d439a256b95dbb_JaffaCakes118

Files

738af005b5f0bbb934d439a256b95dbb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE