a913e7894b6090f4ce845d16518b568a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a913e7894b6090f4ce845d16518b568a_JaffaCakes118
Size

1015KB
MD5

a913e7894b6090f4ce845d16518b568a
SHA1

48adc1bf484cd4e701274079dc5953411919313b
SHA256

33351abe7086bcfb898c899dc9c91900b03b8951c828f6c371b8c75b29ea28ab
SHA512

b4932899e2fe7610dfd81a917905661a8a731c116b97d46b03acf02daf1a55ef53ab9bd90bab35046a4ceb27da74b84d204a9fafb6b3382cc2034042cbff294a
SSDEEP

24576:HDqmsdgTDMlx0wS6H3LMjCK0YrukTLK3GGrD2:jqmSbnLHbQCKpBWD2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a913e7894b6090f4ce845d16518b568a_JaffaCakes118

Files

a913e7894b6090f4ce845d16518b568a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textxc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ultra
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ