77429c24931779819df02840d8949b2f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77429c24931779819df02840d8949b2f_JaffaCakes118
Size

201KB
MD5

77429c24931779819df02840d8949b2f
SHA1

2a7d7bddf6046bdafaab8e5d98d5cc6ea6b30667
SHA256

e4f7353c218d3e06632c5b7fb8117f968faeb95bab110eff98ad0ce2d213ea53
SHA512

4443235fe736dd323578cdf353572cd4f92a9d6479100138025572d689d471e9d7226542e239ebc015fe310c8d31ed809573141f8da83ad1cd397a7faa676882
SSDEEP

3072:JP7l+yUzNQr/BakVzEWrOFmBsFGfaGmC2wjvTGeqYiDFC0z3/fCztsGnQD6cudA4:J7KQDBvrSmB6SDFLT+YkItXQD6cudf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77429c24931779819df02840d8949b2f_JaffaCakes118

Files

77429c24931779819df02840d8949b2f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mshta.pdb

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gda
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE