88972a2473a9ca32d38d055b5234ecc0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88972a2473a9ca32d38d055b5234ecc0_JaffaCakes118
Size

2KB
MD5

88972a2473a9ca32d38d055b5234ecc0
SHA1

fd0bdb0cbd8ab70113c202ff418fe454fa19b5b9
SHA256

41c9f4b58cd5cd820dfa502e4117f13fd62fd43be9dba280b27c338471f33f17
SHA512

6e5395c39dacc633a2c8c3d10760bbe209ccaacf25bb05bb625def89ff2bbaa813f70333c18ee7cf8e887f9b748c80827e9a14f7a1fdcc58a3dd0a256ef525a9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88972a2473a9ca32d38d055b5234ecc0_JaffaCakes118

Files

88972a2473a9ca32d38d055b5234ecc0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ