7821ac37c87efa248c34f0f581bd04fd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7821ac37c87efa248c34f0f581bd04fd_JaffaCakes118
Size

46KB
MD5

7821ac37c87efa248c34f0f581bd04fd
SHA1

4d658673d59b8c8518a37cfeb1a34d8ebad5e238
SHA256

e86abd4d66331dc0bf995645778b913c5b5a0cf2d51d89d37a87a67296c4d8e6
SHA512

c56f674cbb7ab83555f92c7707e0cfb0c9f736c0d61ce1d3b1dff812da8eb86e3ed4c391ba708f4b237a0e20089c9baec9382dc08ce2f366c6ca2cf278175242
SSDEEP

768:XwbYnNcMTmil8e/IyvWnekbCKQ1v/Gr4mTYGUahXhrWP8NlQiUPOsTi5Z4F:Xw8n1cAIyvWLOK2v/deZRa8NlQ/OsSmF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7821ac37c87efa248c34f0f581bd04fd_JaffaCakes118

Files

7821ac37c87efa248c34f0f581bd04fd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.theta
Size: - Virtual size: 1008KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iota
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

XOR
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE