a5a70b7e3d5568950e4264bd4c8fdbd6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5a70b7e3d5568950e4264bd4c8fdbd6_JaffaCakes118
Size

52KB
MD5

a5a70b7e3d5568950e4264bd4c8fdbd6
SHA1

e3239139fa253d19b6e0a9e3941b28d9c5ac220f
SHA256

d5a73e3e732b79f231d0e5afc7905085547556df8873f891fd4188f7d7394bc0
SHA512

3c27333e51524c89f48dd83c4fef3c375e060ffba88bf2e1dde85bcfba93f48ec1a4c65550c969ab5ec7e8afc9e470dff35aeb7d6404d13ca20032239e3b7fb8
SSDEEP

1536:IjCBLypAx3k64k8eBBEZf/hwLPQL4IRetd:JJHBBEZx0P+vgtd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5a70b7e3d5568950e4264bd4c8fdbd6_JaffaCakes118

Files

a5a70b7e3d5568950e4264bd4c8fdbd6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ