a62f6936f58700da4b401ea680067af7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a62f6936f58700da4b401ea680067af7_JaffaCakes118
Size

315KB
MD5

a62f6936f58700da4b401ea680067af7
SHA1

7f096b4e78611e4770e3ad953ebc64c4189c3259
SHA256

abdde047685f50deb00e1cd4319edb1d2709aa11c2038a0c216779e2761d8e90
SHA512

92c790c03e06c2805c050fc68cc1e2538c5c52a51b4b889d27d4ae77a5b681d5a047331090a48d6c7b9803dd559160b839909fe0dff0560aeff856407905bfd9
SSDEEP

6144:q2dMQRcS0FZXpCkXMw4jTg21JQGyvYRlmEMRs317UxTaZ+s1b4:AQRyHCk3YlmGP9MRs317UxT9R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a62f6936f58700da4b401ea680067af7_JaffaCakes118

Files

a62f6936f58700da4b401ea680067af7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

t:\delivery\x86\ship\0\ose.pdb

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.qnk
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE