a2b9d6b1d8e10b48eb60739fc50fe44f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2b9d6b1d8e10b48eb60739fc50fe44f_JaffaCakes118
Size

15KB
MD5

a2b9d6b1d8e10b48eb60739fc50fe44f
SHA1

61b7ec227ffbd162652238699edde5af2e894c35
SHA256

c80fb64e4c65a25ed52a7ec382d1ea9c3ac1c11b20dca8c3cff0c3c300431290
SHA512

11d0d94a0c0754015ed591f055ee33c32721426f978dbba64b1de7f06dc912942d285b07961f6adf814fb29a818592856840997be108d909fa1fb6b73680913c
SSDEEP

384:Q3YXyv70yf/2tFAeScYL/8gZTqV3bLfXruCmlANdFU53JD3:+YRy3gScYrjZTqV3b7XruCvN/O3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2b9d6b1d8e10b48eb60739fc50fe44f_JaffaCakes118

Files

a2b9d6b1d8e10b48eb60739fc50fe44f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ