a699dc4c42b2a98b92dc3f9c1b93b2c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a699dc4c42b2a98b92dc3f9c1b93b2c9_JaffaCakes118
Size

184KB
MD5

a699dc4c42b2a98b92dc3f9c1b93b2c9
SHA1

5c718c0f48b945aeb5071bc98bbcad6faf57bc18
SHA256

91f538a534ab99dcae66b3fcdba92fdb1df91f9c2d8ce9d7ab03cba2e6141f33
SHA512

e2d2a01aaff33862b956468299902c345497173b70538ee62b69a259b6418e25ff72bcd1ac0d601faeeaf29f5893d165c932c119d1b8c2ba555836183f206d53
SSDEEP

3072:79BpbFCWoApYES2wxg9AhM1O2trOSeFfr6nRTReaAnulsTfFzXk4On:7CAp5wdhx2xOSeFseaT+T9j4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a699dc4c42b2a98b92dc3f9c1b93b2c9_JaffaCakes118

Files

a699dc4c42b2a98b92dc3f9c1b93b2c9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

hh.pdb

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rol
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE