a011834ee5fab6579edd5fa02a6a2176_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a011834ee5fab6579edd5fa02a6a2176_JaffaCakes118
Size

95KB
MD5

a011834ee5fab6579edd5fa02a6a2176
SHA1

2961df84768571d3389dda27fb8aa24de6e39ccb
SHA256

15709583c8688f9cf8340e071d028810d40e35b2522191289b4ebf4747a244ee
SHA512

f2a43b606ee50f61bcc060a96ee29ef99500ef9ab8d6f2ff427a4ff136eb799239a6760d1c35c3f9c0f9d3192fd90df9220141657f1cd7801724f6b908c58284
SSDEEP

1536:T6GzUIuoiUB5G2fkwkDoBA/q5GvDzE+hG0RQVdB4U1oF5/:+9hUBQlDoBA/yAD7E0+VTP1oL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a011834ee5fab6579edd5fa02a6a2176_JaffaCakes118

Files

a011834ee5fab6579edd5fa02a6a2176_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 667KB - Virtual size: 666KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.6MB - Virtual size: 19.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ