899e057f5c95f724a329a25df8c3330f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

899e057f5c95f724a329a25df8c3330f_JaffaCakes118
Size

205KB
MD5

899e057f5c95f724a329a25df8c3330f
SHA1

99e31afb582153c194b2dd9008a4fd1a630129e7
SHA256

bbb8101be7956add7a6051f6db91050195d430f3c841ed785acfae49c0ef1585
SHA512

5b089c8617d9221c258d55ffb61fd65d07ad783b5734b3818ac1cbd8af499e280ba8d291d05ab69ab11f981614b1d3a477132866caac1dda820bdc2ab944e4ac
SSDEEP

6144:Fv93ZCZDEEBikQ7ui5pA2Svzw/NZ5a3hF0:T3kRFUkk15f8zFxO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
899e057f5c95f724a329a25df8c3330f_JaffaCakes118

Files

899e057f5c95f724a329a25df8c3330f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mnmsrvc.pdb

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mjg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE