ab171ce6c3eeca7f9a9b38e4c34c43cf_JaffaCakes118 | Triage

Sharing

General

Target

ab171ce6c3eeca7f9a9b38e4c34c43cf_JaffaCakes118
Size

191KB
MD5

ab171ce6c3eeca7f9a9b38e4c34c43cf
SHA1

0326de26414a38453c3c94099f42cc2cd1eac25a
SHA256

c862607b9d476b26e8e5560808578132c1d9b3d285a666ea70b5536d032ed5a0
SHA512

a09f35e9e3e7767c13cd79a4275f6e7f0f7836667f800a2b50d3663118fb29e66921549d5c7c745ed532ea9ab2a33a970bf9d713737d9afd2fdc0e536624a781
SSDEEP

3072:u9T5LhSzltH/2/nWwnZEwmBeqMWHCCco24e5AIVM5Lh0zCSn2BEQoapfnn4X:oT7u/y5nZH+esHvcoLe5NM52zFmjoI4X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab171ce6c3eeca7f9a9b38e4c34c43cf_JaffaCakes118

Files

ab171ce6c3eeca7f9a9b38e4c34c43cf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ups.pdb

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zwt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE