aaac822c6e7dbce418b6eba4a6d13943_JaffaCakes118 | Triage

Sharing

General

Target

aaac822c6e7dbce418b6eba4a6d13943_JaffaCakes118
Size

47KB
MD5

aaac822c6e7dbce418b6eba4a6d13943
SHA1

b82e65cc324db906c93a62e916eaacb9176fb0e5
SHA256

17615d0acadeeaeceb5c899175c8e7bbb552b026163c06d88b82d19cf794c455
SHA512

4818cf35fd0edd880d053381afbe5ede957b214dbd1201dbf8c3851585e65a13d781cfda7b690abfa5f4240f5d2a1382691ce962fca35b92a372fc08e28ebed5
SSDEEP

768:WxnZpp+Ptx/yalAI5lcdJ7bihJ+6SzSpE9u/0EMvSHj6X/RGH6Y1:WZZj++al/lqih7p9/gvpYp1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaac822c6e7dbce418b6eba4a6d13943_JaffaCakes118

Files

aaac822c6e7dbce418b6eba4a6d13943_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bf1ac19e064ab24b68e7b67cadeeb289

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\tw1n\test\Release\tw1nCrypt.pdb

Imports

kernel32

lstrcmpiA

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 179B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ