880680ead991a1f497c10cf7c5ada83d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

880680ead991a1f497c10cf7c5ada83d_JaffaCakes118
Size

227KB
MD5

880680ead991a1f497c10cf7c5ada83d
SHA1

ed0bda43db488fad55dbec8d5a58c6bf2b528c72
SHA256

88fdb222aa41c5338284b38a3bb1dd05554055e708b868f3d9fb269415c9fb1a
SHA512

5b993b5a92e246939a1de91b547f52eaebe4e0c35334836a8d5e5698a8b6d9b6be4417f8f0b983ae135f3b71561ed9e838b42d3e08ae87db353351f7da694940
SSDEEP

6144:I2/fuIsV4793gCFqNo3XUxMOZuW1KXD0qd+oye:Ih4RP3cuyKXtye

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
880680ead991a1f497c10cf7c5ada83d_JaffaCakes118

Files

880680ead991a1f497c10cf7c5ada83d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gda
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE