ad018df0d8de832ceee273396ef16cdb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad018df0d8de832ceee273396ef16cdb_JaffaCakes118
Size

128KB
MD5

ad018df0d8de832ceee273396ef16cdb
SHA1

5beb35d6c22b494ae7a21cbeef195c814a2cb25d
SHA256

ae5b348d782b1704eb9f16e5f607fa62ed178ff9b2edba7dfc0a53f8ca3a9234
SHA512

a3629438702da76772286b90073d489286ffaf28ad6c4b23fc04d7eaa784643cc1d7b1da5c512b2f151aa3a73604872b7dfbbb3bef851394279db782e5a72011
SSDEEP

3072:KLa17RVeHdh+Y48SNCK7c2sfJRdsIUBUA22C+CoKl+k/YJotbw0N:6a1beTTSNCK7knGhfC9oKl/DtM0N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad018df0d8de832ceee273396ef16cdb_JaffaCakes118

Files

ad018df0d8de832ceee273396ef16cdb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 98KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ