a10b9cdbbe141f43d3983d8d0e1de0d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a10b9cdbbe141f43d3983d8d0e1de0d5_JaffaCakes118
Size

309KB
MD5

a10b9cdbbe141f43d3983d8d0e1de0d5
SHA1

6fe9e26c2b5639980aa0fafdd919b81ced96cdab
SHA256

cc71613e5caa25b7ebd8148af440e1aa92e749ceacccd45a2f3648e06ed3d316
SHA512

9735c8ffcbb7a2c56ed0add9261b524789230322727612a5fe923668152bcd149ba4806cc918fc9ac4bcc79e7a332de69a3dc6db3abd4dc79800f1a4188b2aa7
SSDEEP

6144:Pdv6zWfO9URxjI3KsiNdDJyeuTZ+5CIQRFhrh8v5Nd/d:Uzmj+KhabTZpIQRFriNNd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a10b9cdbbe141f43d3983d8d0e1de0d5_JaffaCakes118

Files

a10b9cdbbe141f43d3983d8d0e1de0d5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.spm
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE