842643e560ba14f20b0c86592d2a17a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

842643e560ba14f20b0c86592d2a17a9_JaffaCakes118
Size

232KB
MD5

842643e560ba14f20b0c86592d2a17a9
SHA1

2e77c7faaf7630b2a5b80eea3cc552c5e8e68c2e
SHA256

4be0431b7c81d1d0633957656d5e7ad7cf222a7975ba04df71b1f6ab3f363ab0
SHA512

0590b16a172ced28a8cdcc2c864c534358c209f231acab76877cc44ac0bad4d0d0118fb4d6f9af9c3b31c66837ef1cda1374c6639eb4d55a86f0db576e669178
SSDEEP

6144:Fv+XKffSUw+GAcQIa+n5wnbTo5j7gwdfIW5fIgm+:t+6nQ+GAT+n5go5wwdw+U+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
842643e560ba14f20b0c86592d2a17a9_JaffaCakes118

Files

842643e560ba14f20b0c86592d2a17a9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

oemig50.pdb

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jgd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE