a11f76d719589a343f002cdebf7d2874_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a11f76d719589a343f002cdebf7d2874_JaffaCakes118
Size

623KB
MD5

a11f76d719589a343f002cdebf7d2874
SHA1

7ed8d6ee396382e883bd9a918a1e3eea31f357da
SHA256

670d7954d3ef33d6c329db0170a09a671238869fa888e97d2a2f80e20ebe6819
SHA512

37241dffa9a7554f8ba66dc6f12cae7ae2102af402a337376501170656cb612aa0e40499cf9e1422a6ed250467df6365b2b3cd72366bcb19eb3dbe4100f1f89e
SSDEEP

12288:FSo6xg5kN530xuooqMVwsgS0Tyv9H7e9EG5:16u5030x+gS0TyvNi/5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a11f76d719589a343f002cdebf7d2874_JaffaCakes118

Files

a11f76d719589a343f002cdebf7d2874_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 336KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 201KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45B - Virtual size: 45B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.uro
Size: 215KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ptitxen
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE