949c2d1adc19dcf0cc77fcc73c8dd79c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

949c2d1adc19dcf0cc77fcc73c8dd79c_JaffaCakes118
Size

14KB
MD5

949c2d1adc19dcf0cc77fcc73c8dd79c
SHA1

eb0f19dbec9b3f13e7632c4e2a23ec1a2d46afec
SHA256

1a37b3b9e0107aa37e63eb2a515d29f243f7575dcfefef185e1cffd0b9b0f902
SHA512

fea799d00cf7c1950929be21bf16421ace9800a34e94d9e85e938a6e02f940feef627ae36fb30bb6ba84f2e0e7b23612ba8fcc50a24352d419241ae7eedda60f
SSDEEP

192:lMp+VerGKpwjwudMnGj3OvThOGV6R4sXoviJKSvwZNohAjRHUvtzfjeA:ZVeiKpsw8jV4sXo8vTRnF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
949c2d1adc19dcf0cc77fcc73c8dd79c_JaffaCakes118

Files

949c2d1adc19dcf0cc77fcc73c8dd79c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 637KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ