87a43ab1e467cba1bd68edb3afb67454_JaffaCakes118 | Triage

Sharing

General

Target

87a43ab1e467cba1bd68edb3afb67454_JaffaCakes118
Size

830KB
MD5

87a43ab1e467cba1bd68edb3afb67454
SHA1

8c6d6205c67cd6b6bdc62d4c66d24a90b9b1e191
SHA256

b41d544288e526823c74edb96153916572407c6507e3b3137b1cdd408b3335ac
SHA512

516ed802a0d462da3c04ec87d54c4de2b0783550706669e38f45f38ed7e247208162034d23494036e2584c2eefa8f42db3c5cbaa47e766afaf31f577f7111557
SSDEEP

12288:zhO3NQoknYj29L5JbUaqh4A7YPy3Jr5ZkcE2k6+1RCmdpUom0cnxd:zhO3LkYj21U8E6Ok6+17LTc7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87a43ab1e467cba1bd68edb3afb67454_JaffaCakes118

Files

87a43ab1e467cba1bd68edb3afb67454_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.h8us8$
Size: 1KB - Virtual size: 412KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.88obbh
Size: - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 3.0MB

.idata
Size: - Virtual size: 460KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 349KB - Virtual size: 352KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE